Hi,
as I have now managed to get back into my OBSD system I have tested ftp
again from clients yet still even with the recent upgrade I seem to be
unable to list certain directories??
I have checked the option flags for ftpproxy (man ftpproxy) however,
couldn't find anything of help.
An example is the Shrubbery ftp site:
this directory lists fine: ftp://ftp.shrubbery.net/pub/astraceroute/
while this one doesn't list at all?? ftp://ftp.shrubbery.net/pub/rancid/
tcpdump -eni doesn't show anythng specific:
16:01:40.755991 10:0b:a9:5c:a4:2c 00:25:90:d0:ba:00 0800 66: <***>.54958
> 129.250.47.99.21: . ack 2344340832 win 229 <nop,nop,timestamp 1070904
3015288354> (DF)
16:01:40.756004 00:25:90:d0:ba:00 10:0b:a9:5c:a4:2c 0800 66:
129.250.47.99.21 > <***>.54958: . ack 1 win 271 <nop,nop,timestamp
3015288444 0>
16:01:42.938689 10:0b:a9:5c:a4:2c 00:25:90:d0:ba:00 0800 74: <***>.54962
> 129.250.47.99.21: S 3566867037:3566867037(0) win 29200 <mss
1460,sackOK,timestamp 1071558 0,nop,wscale 7> (DF)
16:01:42.938725 00:25:90:d0:ba:00 10:0b:a9:5c:a4:2c 0800 78:
129.250.47.99.21 > <***>.54962: S 3753545844:3753545844(0) ack
3566867038 win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
6,nop,nop,timestamp 2390749407 1071558>
<snip>
16:02:04.356644 00:25:90:d0:ba:00 10:0b:a9:5c:a4:2c 0800 120:
129.250.47.99.21 > <***>.54974: P 401:455(54) ack 112 win 271
<nop,nop,timestamp 2400821070 1077862>
16:02:04.357548 10:0b:a9:5c:a4:2c 00:25:90:d0:ba:00 0800 66: <***>.54974
> 129.250.47.99.21: . ack 455 win 229 <nop,nop,timestamp 1077984
2400821070> (DF)
--> then the report waits
I'm just wondering as the last statement is (DF) - the Do Not Fragment
flag, could this be an MTU issue??
Though the odd thing is that this was working fine until two upgrades
ago which are still quite recent 2017 dated.
In PF I have the standard rule:
# Proxy rules
anchor "ftp-proxy/*"
pass in quick on $int_if inet proto tcp to any port ftp \
divert-to 127.0.0.1 port 8021
And as I'm on a VDSL2 line I have:
net.inet.tcp.mssdflt=1452
in sysctl.conf
and the MTU set on the PPPoE interface as: mtu 1492
All other web based traffic operates fine apart from certain ftp
transactions??
Would anyone be able to suggest anything?
Many Thanks.
Kaya
