locsite fwfriendly sets it so that the client is the source for all connections going to the remote ftp server (in ftp terms it's a PASV mode connection).
When the ftp server is running, the config on the server can specify a range of ports that it can tell the client to connect to it for the data connection, where the actual transfer occurs. As it's a defined range, the firewall can be configured that way also. When not in PASV mode, but PORT mode (default) - it's the ftp client that tells the ftp server to open the data connection, and what ip address and port the server is to connect to on the client side. This mode is more difficult (and generally not liked), as there is no way to limit what ports the client will tell the server to connect to, and the firewall folks have to open outgoing sessions on all high ports (> 1024). Peter On Sun, 2 May 2021 12:38:29 -0500, Steve Horein <steve.hor...@gmail.com> wrote: >If I'm not mistaken, "locsite fwfriendly" accommodates data connections >other than port 20. > >On Sun, May 2, 2021 at 1:22 AM Brian Westerman < >brian_wester...@syzygyinc.com> wrote: > >> Thanks to some timely help from Peter Vels who suggested tracing the FTP >> routine, I was able to find the problem. At my site the "locsite >> fwfriendly" is required. I still don't know why that is, but it has been >> that way at several of the site I manage as well, (but not all). Changing >> that to be there (it was commented out in the CBT exec), made it work. >> >> Thanks again to Peter for pointing the way. >> >> Brian >> >> On Sun, 2 May 2021 00:03:15 -0500, Brian Westerman < >> brian_wester...@syzygyinc.com> wrote: >> >> >Please ignore this problem. When I went back and read the instructions I >> saw that I'm suppose to UNZIP FILE001 before I upload it in binary format >> to the sequential dataset. Once I did that it loaded okay. >> > >> >Just goes to show you, read the instructions closely before you complain. >> :) >> > >> >Now I have to work on getting the FTP part to work because it's not as >> much use without that, (except I do like that you can see the comments when >> you select the entry). >> > >> >Does anyone know how to turn DEBUG on to see what's going wrong with FTP? >> > >> >Brian >> > >> > >> >On Sat, 1 May 2021 23:52:08 -0500, Brian Westerman < >> brian_wester...@syzygyinc.com> wrote: >> > >> >>I can't get CBTVIEW to work, I get to the part where it tries to >> download the File001 and it fails, so I downloaded it to my workstation and >> uploaded it to the mainframe as a FB 80 9440 file and now I get a message >> that says build completed (then it pauses for about 60 seconds) and then I >> get: >> >> >> >>IEC141I 013-18,IGG0191B,BRIANW,$SYSTEMS,CBT78000,1466,PROD04, >> >> >>BRIANW.FILEIDX.PDS(CBTINDEX) >> >> >>IRX0250E System abend code 013, reason code 00000024. >> >> >>IRX0255E Abend in host command execio or address environment routine >> TSO. >> >>IEA995I SYMPTOM DUMP OUTPUT >> >> >>SYSTEM COMPLETION CODE=013 REASON CODE=00000018 >> >> >> TIME=21.40.14 SEQ=37529 CPU=0000 ASID=00E0 >> >> >> PSW AT TIME OF ERROR 075C1000 80E74598 ILC 2 INTC 0D >> >> >> NO ACTIVE MODULE FOUND >> >> >> NAME=UNKNOWN >> >> >> DATA AT PSW 00E74592 - 4100302C 0A0D010D A7E5014B >> >> >> AR/GR 0: 00AFBF84/00000000_00E748A0 1: 00000000/00AA2D94_A4013000 >> >> >> 2: 00000000/00000000_00072250 3: 00000000/00000000_00E74874 >> >> >> 4: 00000000/00000000_00AAA410 5: 00000000/00000000_00AAA7A4 >> >> >> 6: 00000000/00000000_00AAA74C 7: 00000000/00000000_00AAA7A4 >> >> >> 8: 00000000/00000000_00AAA76C 9: 00000000/00000000_00072280 >> >> >> A: 00000000/00000000_00F9D658 B: 00000000/00000000_7F515CE8 >> >> >> C: 00000000/00000000_00000008 D: 00000000/00000000_00AAA7A4 >> >> >> E: 00000000/00000000_80E73DF6 F: 00000000/00000000_00000018 >> >> >> END OF SYMPTOM DUMP >> >> >>IRX0670E EXECIO error while trying to GET or PUT a record. >> >> >>*** >> >> >> >> >>I agree with the s013-18 because the CBTINDEX member is not there to >> open, but so much of this is hidden behind the CBT rexx exec that I can't >> tell where it's failing. >> >> >> >>I think that FILE001 being in ZIP format might be hurting this, but I >> think the CBT exec is supposed to unzip it first, but maybe I'm wrong. Has >> anyone got this to work or should I just start debugging now? >> >> >> >>---------------------------------------------------------------------- >> >>For IBM-MAIN subscribe / signoff / archive access instructions, >> >>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > >> >---------------------------------------------------------------------- >> >For IBM-MAIN subscribe / signoff / archive access instructions, >> >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
