DSM-G600, DNS-3xx and NSA-220 Hack Forum

My FTP worked for a few weeks and then I upgraded FW and couldnt connect.  I was able to change an option for Passive FTP and it worked for a few days but now nada.  Is it not recommended to use IE?

kimhav...I checked out that wiki for the DNS323 and I need to look at it more since it is greek to me.  There was something about changing some paramters in a file to show the what my routers IP address is on the internet.

Just to verify, I can access the ftp internally on my own network at home.  But here at work, I tried what you said above with the ftp://userid:password@192.168.0.10/  I realize the 192.168.0.10 isn't my IP address so I changed it to mine at home.  But its still not working...

Could it be that there is a firewall at work preventing access to this kind of thing???

Sorry if I post a double post here but I need to get an answer...
I read the wiki but I couldn't find the answer there. I try to access via FTP on my external IP (as found here; http://www.canyouseeme.org/) but the IP changes from now and then. I guess it's becuase my supplier (Telia) uses dynamic IP. How do I solve that? I mean, I don't know if the IP has changed if I try to access my DNS from work.

A little help is wanted from a dumb newbie... ;-)

Apskaft wrote:

And, remember to redirect port 21, 65501-65510 in your router so that they are sent to the DNS (192.168.0.10).

/Apan

I set the redirect port 21, 65501-65510 in the virtual server list for my router (Belkin Pre-N).  I tried again at work to access but its not working.

Right now, I have it set to the actual IP address that the DNS-323 is set to.  I am going to try this 192.168.0.10 and see if it works.

At home on either my computer or the wireless laptop:  ftp://192.168.x.x and it works.  But at work, it doesn't recognize it.  I understand that the home is the inside network and it works fine.  But being able to access it at work or other places is turning out to be a challenge.

Sorry if I don't know what I am doing but am looking for help.

Correct 192.168.x.x IP-serie can only be accessed on the inside or on the local network. Another resource to figure out the public IP is http://whatismyip.com

Last edited by kimhav (2007-03-06 23:44:41)

There you go. Now you can get it to work. Just remeber, if you have dynamic IP it will change thus "killing" your FTP-setup unless you fix a dyDNS client.

Dynamic IP + NAT + wu-ftpd doesn't work. Every time the external IP changes, changes has to be made to the /etc/ftpaccess and the ftp deamon has to be restarted.

The only way to get this working is to write some script which occasionaly (cron) ping's an external note, finds the IP, modifies the /etc/fptaccess and restarts the fpt-deamon.

If your router supports virtual ftp server, then that's the proper way to get this working.


For a free and simple dynamic DNS service, check out http://freedns.afraid.org - a simple wget in your fun_plug or in a cron job will set the IP.

/Apan

votum wrote:

I can access all files and folders from work but there seems to be some issues copying them to my work computer

If you can access the file-listings from work then you should be able to download. Assuming PASV, this is how it works - in essence:

1. Client and server communicates on port 21, sending commands and responses (Ok/Not-Ok),
2. When the client sends a command, the server answers with IP and port
3. Client opens a data channel on IP+port and downloads or uploads the content, depending on command
4. Client closes the data channel
5. Goto step 2

The command can be LIST, STOR, RETR, etc. and the result can be directory listing, a file, etc.

The client will (mostly) stay connected on port 21, which allows it to send new commands and initiate more work for the server - in parallell. And, most important, the client can also send ABORt to cancel an ongoing transfer.

The DNS-323 is setup to use port 21 for commands. This can be modified using the WEB GUI. It is also setup to use the range 65501-65510 for the data part. This can also be modified, but only by editiing the /etc/ftpaccess.

The problem with Dynamic IP and ftp servers behind NAT is that the servers doesn't know that they're behind NAT. They think they are on the internet. A ftp-server behind NAT must be told that it's behind NAT - or discover it. Wu-ftpd cannot discover this and must be told which IP to send (step 2 above) to the client. If the externa IP changes, then Wu-ftpd has to be re-configured and re-started before it can work properly again. Sure, step 1 works fine but the client will try to fetch the data from a another server.

The problem you're facing, might and only might, be proxy related. Your corporate proxy maybe doesn't close the data sockes immediately. After 10 dir-listings, there will be no ports left for the wu-ftpd to use. Try to increase the span (65501-65510 => 65000-65100) that wu-ftp can use to see if it works better.

votum wrote:

So, apskaft, what you're saying is that it's not possible to get it to work?

Oh, it's possible but my strong opinnion is that this should be solved in the router and not in the ftp server. Basicly, a virtual server will interfer the communication on port 21 and replace the IP the server thinks it has with the real external IP.

Generally, Dynamic IP + NAT + servers is a bad combination. Remove one and it'll work. If you insist of keeping all three, then perpare for heavy configuration of your equiment.


For more information, see rfc 959


/Apan

Apskaft wrote:

Generally, Dynamic IP + NAT + servers is a bad combination. Remove one and it'll work. If you insist of keeping all three, then perpare for heavy configuration of your equiment.

The only real problem is dynamic IP, because it disrupts all established connections. NAT can work well if carefully implemented, but that seems to be hard (e.g. netgear ships fucked up NAT in their WPN824). Dynamic IP without NAT is still annoying, even if not having/using local servers.

SUCCESS!!!!  I found out my IP address at home this morning by using that www.canyouseeme.org link, just tried it here at work and the FTP server is working!  This is setup on my router with ports 21, 65501-65510 opened.  Now, I can't remember if I have Dynamic IP or dyDNS client.  How would I check this setting?  In my router?

My next question is, how secure is this FTP server?  And can I limit access to user and time of day?  I have a password set up on it now.  But I just don't want anyone to go on and see what I have.

Next thing I need to do is setup a folder for pictures so I can have family and friends view them online.

I have been messing with this some more.  I have a bunch of mp3's in a folder and when I log on I can see all of the mp3's, but very few of them play.

When I double click on the file it opens another internet explorer window.  Sometimes it will give me the "This page cannot be displayed" and nothing more happens.  And sometimes it will open the media player to start playing (very few of them do this though).

Then there are those that open and, I get an error something like this...

0xC00D1197: Cannot play the file
Windows Media Player cannot play the file. You may encounter this error message for one of the following reasons:

Your computer is not connected to the local area network (LAN) or to the Internet. Connect to the network or Internet, and then try again.
The path to the file is not valid. If you typed a Uniform Resource Locator (URL) in the Open URL dialog box, ensure that the file name is spelled correctly and the path to the file is correct, and then try again. If you clicked a link on a Web page, the link may not be valid.
The server is down or busy. Try again later.
Some network protocols in the Player are not enabled. Enable all network protocols, and then try again.
The proxy server settings for the Player are not configured properly. Verify that your proxy settings are correct, and then try again.

I tried to go into the settings, but there is little I can do there since I don't know what the proxy settings are.

Any other suggestions?

WildSioux wrote:

Any other suggestions?

Seriously, are you trying to stream music from the DNS-323 over the internet using ftp? Don't. The protocol or the server was not made for it. If you want to stream over the internet I suggest that you instead install lighttpd and stream using http instead.

/Apan