FTP server problems

[viNkmeiSter]

Hi

I'm new here and my english isnt very good... So please no hard feelings..

I have a question about my WL500g... I want to set-up a FTP server with a usb stick or hdd... I have no problems with connecting it from LAN but if i or my friend want to connect it from WAN then something goes wrong.. I have no idea what it is...

Today I had updated my firmware version to 1.7.5.9-5 from this site http://files.wl500g.info/asus/wl500g/firmware/customized/

I have no idea what i should do now... I have enabled the FTP server in de configuration menu and port trigger, does anybody knows something to solve this... I would be very thankfull :p

I'm a newbie in this stuff..!

[Styno]

There have been more ppl having problems with connecting to the FTP server from WAN. I believe these problems were only with certain firmwares, the 1.7.5.9-5 version worked flawlessly for me over a long period so there must be an error on your side of the keyboad ;).

1st: Did you follow the upgrade steps carefully (like resetting to defaults etc.)?
2nd: The FTP server does not need port forwarding with firmware 1.7.5.9-5 nor in any other firmware AFAIK.
3rd: 'Something goes wrong' is not a very helpful description for us to decide what is wrong. Please post logs from the Asus and preverably also from your friends ftp client.
4th: Search this forum.

[viNkmeiSter]

okay


my log says this

Jan 1 01:00:15 syslog.notice klogd: klogd started: BusyBox v1.00-pre7 (2004.08.16-13:03+0000)
Jan 1 01:00:15 user.warn klogd: CPU revision is: 00024000
Jan 1 01:00:15 user.warn klogd: Loading BCM4710 MMU routines.
Jan 1 01:00:15 user.warn klogd: Primary instruction cache 8kb, linesize 16 bytes (2 ways)
Jan 1 01:00:15 user.warn klogd: Primary data cache 4kb, linesize 16 bytes (2 ways)
Jan 1 01:00:15 user.warn klogd: Linux version 2.4.20 (root@omnibook) (gcc version 3.0 20010422 (prerelease) with bcm4710a0 modifications) #1 Fri Aug 13 13:44:07 MSD 2004
Jan 1 01:00:15 user.warn klogd: Determined physical RAM map:
Jan 1 01:00:15 user.warn klogd: memory: 01000000 @ 00000000 (usable)
Jan 1 01:00:15 user.warn klogd: On node 0 totalpages: 4096
Jan 1 01:00:15 user.warn klogd: zone(0): 4096 pages.
Jan 1 01:00:15 user.warn klogd: zone(1): 0 pages.
Jan 1 01:00:15 user.warn klogd: zone(2): 0 pages.
Jan 1 01:00:15 user.warn klogd: Kernel command line: root=/dev/mtdblock2 noinitrd init=/linuxrc
Jan 1 01:00:15 user.warn klogd: CPU: BCM4710 rev 0 at 125 MHz
Jan 1 01:00:15 user.warn klogd: Calibrating delay loop... 82.94 BogoMIPS
Jan 1 01:00:15 user.warn klogd: Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Jan 1 01:00:15 user.warn klogd: Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Jan 1 01:00:15 user.warn klogd: Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
Jan 1 01:00:15 user.warn klogd: Checking for 'wait' instruction... unavailable.
Jan 1 01:00:15 user.warn klogd: POSIX conformance testing by UNIFIX
Jan 1 01:00:15 user.warn klogd: PCI: Fixing up bus 0
Jan 1 01:00:15 user.warn klogd: PCI: Fixing up bridge
Jan 1 01:00:15 user.warn klogd: PCI: Fixing up bus 1
Jan 1 01:00:15 user.warn klogd: Initializing RT netlink socket
Jan 1 01:00:15 user.warn klogd: Starting kswapd
Jan 1 01:00:15 user.notice klogd: NTFS driver v1.1.22 [Flags: R/O]
Jan 1 01:00:15 user.warn klogd: pty: 256 Unix98 ptys configured
Jan 1 01:00:15 user.notice klogd: Amd/Fujitsu Extended Query Table v1.1 at 0x0040
Jan 1 01:00:15 user.warn klogd: Physically mapped flash: Swapping erase regions for broken CFI table.
Jan 1 01:00:15 user.notice klogd: number of CFI chips: 1
Jan 1 01:00:15 user.notice klogd: Flash device: 0x400000 at 0x1fc00000
Jan 1 01:00:15 user.notice klogd: Physically mapped flash: squashfs filesystem found at block 988
Jan 1 01:00:15 user.notice klogd: Creating 5 MTD partitions on "Physically mapped flash":
Jan 1 01:00:15 user.notice klogd: 0x00000000-0x00040000 : "pmon"
Jan 1 01:00:15 user.notice klogd: 0x00040000-0x003e0000 : "linux"
Jan 1 01:00:15 user.notice klogd: 0x000f7284-0x003e0000 : "rootfs"
Jan 1 01:00:15 user.notice klogd: 0x003f0000-0x00400000 : "nvram"
Jan 1 01:00:15 user.notice klogd: 0x003e0000-0x003f0000 : "config"
Jan 1 01:00:15 user.warn klogd: ip_conntrack version 2.1 (128 buckets, 1024 max) - 344 bytes per conntrack
Jan 1 01:00:15 user.warn klogd: ip_conntrack_pptp version 1.9 loaded
Jan 1 01:00:15 user.warn klogd: ip_nat_pptp version 1.5 loaded
Jan 1 01:00:15 user.warn klogd: ip_tables: (C) 2000-2002 Netfilter core team
Jan 1 01:00:15 user.warn klogd: ipt_time loading
Jan 1 01:00:15 user.warn klogd: FAT: bogus logical sector size 34560
Jan 1 01:00:15 user.warn klogd: FAT: bogus logical sector size 34560
Jan 1 01:00:15 user.err klogd: NTFS: Unable to set blocksize 512.
Jan 1 01:00:15 user.warn klogd: VFS: Mounted root (squashfs filesystem) readonly.
Jan 1 01:00:15 user.warn klogd: Warning: unable to open an initial console.
Jan 1 01:00:15 user.warn klogd: Algorithmics/MIPS FPU Emulator v1.5
Jan 1 01:00:15 user.warn klogd: eth0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.10
Jan 1 01:00:15 user.warn klogd: eth1: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.10
Jan 1 01:00:15 user.warn klogd: PCI: Enabling device 01:02.0 (0004 -> 0006)
Jan 1 01:00:15 user.warn klogd: eth2: Broadcom BCM43XX 802.11 Wireless Controller 3.50.21.10 (Compiled in . at 20:53:00 on Jan 21 2004)
Jan 1 01:00:17 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=64.233.185.107 DST=213.73.174.253 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=4635 PROTO=TCP SPT=80 DPT=1269 WINDOW=8190 RES=0x00 ACK FIN URGP=0
Jan 1 01:00:18 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=64.233.185.107 DST=213.73.174.253 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61758 PROTO=TCP SPT=80 DPT=1269 WINDOW=8190 RES=0x00 ACK FIN URGP=0
Jan 1 01:00:20 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=64.233.185.107 DST=213.73.174.253 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=40840 PROTO=TCP SPT=80 DPT=1269 WINDOW=8190 RES=0x00 ACK FIN URGP=0
Jan 1 01:00:24 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=64.233.185.107 DST=213.73.174.253 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55058 PROTO=TCP SPT=80 DPT=1269 WINDOW=8190 RES=0x00 ACK FIN URGP=0
Jan 1 01:00:24 user.notice dhcp client: deconfig: lease is lost
Jan 1 01:00:24 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=172.31.254.153 DST=213.73.174.253 LEN=399 TOS=0x00 PREC=0x00 TTL=252 ID=33116 DF PROTO=UDP SPT=67 DPT=68 LEN=379
Jan 1 01:00:24 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=172.31.254.153 DST=213.73.174.253 LEN=399 TOS=0x00 PREC=0x00 TTL=252 ID=33117 DF PROTO=UDP SPT=67 DPT=68 LEN=379
Jan 1 01:00:26 user.notice dhcp client: bound IP address 213.73.174.253 from server 172.31.254.153
Jan 1 01:00:30 user.warn klogd: usb.c: USB device 2 (vend/prod 0x781/0x5151) is not claimed by any active driver.
Jan 1 01:00:32 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=64.233.185.107 DST=213.73.174.253 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=27160 PROTO=TCP SPT=80 DPT=1269 WINDOW=8190 RES=0x00 ACK FIN URGP=0
Jan 1 01:00:35 user.warn klogd: Vendor: SanDisk Model: Cruzer Micro Rev: 0.2
Jan 1 01:00:35 user.warn klogd: Type: Direct-Access ANSI SCSI revision: 02
Jan 1 01:00:35 user.warn klogd: Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0
Jan 1 01:00:35 user.warn klogd: SCSI device sda: 501759 512-byte hdwr sectors (257 MB)
Jan 1 01:00:35 user.warn klogd: sda: Write Protect is off
Jan 1 01:00:38 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=213.73.146.41 DST=213.73.174.253 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=19288 DF PROTO=TCP SPT=3412 DPT=445 WINDOW=64240 RES=0x00 SYN URGP=0
Jan 1 01:00:41 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=213.73.146.41 DST=213.73.174.253 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=19605 DF PROTO=TCP SPT=3412 DPT=445 WINDOW=64240 RES=0x00 SYN URGP=0
Mar 3 18:54:22 user.warn klogd: lp driver: get device ID
Mar 3 18:54:22 user.warn klogd: neg fail
Mar 3 18:54:26 user.warn klogd: Register User Space Key Handler : 999 0
Mar 3 18:54:26 user.emerg NTP client: time is synchronized to 131.107.1.10


I have now idea what this means... Like I said i'm a newbie...

[Styno]

You did just reboot it so this log does not show any logon attempts to the FTP server :eek:

Please disable the firewall logging options (for our clearity) then try connecting from WAN and then post logs from both Asus and FTP client.

[viNkmeiSter]

I askt a friend to tried to connect to ftp://test:test@ievjuh.no-ip.com:21
(I have a dynamic IP adres so I maid an account at no-ip.com, so its tracks your ip, sort of :p ) But nothin came by the log screen, it is still the same as my last post.... only this time i have turn off the logs of the firewall...

When I go to this site and check if the ports are open... port 20 and 21 are NOT open.... so I think that is the problem... does anybody knows what i can do about it...???

http://scan.sygate.com/stealthscan.html

greets

[Styno]

I askt a friend to tried to connect to ftp://test:test@ievjuh.no-ip.com:21
(I have a dynamic IP adres so I maid an account at no-ip.com, so its tracks your ip, sort of :p ) Why not dyndns? It has same service as no-ip.com, doesn't cost anything either and the router has support for it. I should consider using dyndns.


But nothin came by the log screen, it is still the same as my last post.... only this time i have turn off the logs of the firewall...

When I go to this site and check if the ports are open... port 20 and 21 are NOT open.... so I think that is the problem... does anybody knows what i can do about it...???

http://scan.sygate.com/stealthscan.htmlIf the ports are stealthed you won't get a connection.

Please disable the firewall and try again. Also post the output from
iptables -L

[viNkmeiSter]

I now have the firewall of! and the ports are still NOT open... isnt there any program or utilty for it to open the ports...?

When i put that textline you said into the system command i get this as result...

Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:80 flags:SYN,RST,ACK/SYN
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT tcp -- anywhere anywhere tcp dpt:21 flags:SYN,RST,ACK/SYN

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination


I have also made an account at dynds.org.... its
vinkmeister.homeftp.org
it is also activated in the router "IP Config - Miscellaneous" screen

[Styno]

Hmm, iptables seem ok to me. Perhaps your ISP blocks connections to common ports like 21, 25, 80 and 8080. You might want to check this on the website of your ISP.

Try forward a port (> 1024) on the router (like port 7000) to a pc on your lan (FTP or webserver for instance) and test if its open using ShieldsUP!

[viNkmeiSter]

okay.. i have tried to open the ports... in the asus web manager "NAT Setting - Port Trigger" but stil no results... :confused: :confused: :confused:

My internet provider is Multikabel... i can't find anything about port blocking on thier site...

i have made some printscreen's..

[Styno]

If you've enabled FTP in the webinterface there's no need to setup PortTrigger for the FTP server. You should disable PortTrigger because portforwarding is not handled by the PortTrigger pages! If you want to use portforwarding you should configure that in the VirtualServer pages. Read your manual about that again please.

[viNkmeiSter]

oke...

I have done that... By the Virtual Server page... i opend 3 extra ports...
My firewall (mcafee) said that there was a incoming signal from the ip adress of Shields UP!
I don;t know if that has any affect...?
The ports that i chekd where before stealth en now there are closed.... also the ftp ports....!

i have made some screenshot agian....

where going forward :cool: :p

[Styno]

McAfee firewall doesn't stealth the ports by default as it seems. Also your provider does not seem to block port 21.

This is what should work for you:
- Configure the FTP server as done so in the attached image
- Disable PortTrigger
- Disable VirtualServer
- Disable VirtualDMZ
- Save settings and reboot the router

[viNkmeiSter]

ITS WORKING :cool: :cool: :cool: :cool: :cool:

thx man!!!

i think the problems where becouse the VirtualServer... When i turned that of it did it... :D :eek: Now i have the firewall on and its working like hell :D

But i have a few more questions.... :P
-With a hard disk of 120/160 gb... you need to make 5 or more partitions (FAT32 + WinXP) Is it than also possilbe as user of the ftp... from WAN to switch to another partition... because is would have now use to buy a 120/160 gb hdd....

-What does "Stay Timeout in Seconds: " ; "Login Timeout in Seconds:" means... in the menu "USB Application - FTP Server"?

-What does this mean in my SystemLog?

"Jan 1 01:00:23 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=172.31.254.153 DST=213.73.174.253 LEN=399 TOS=0x00 PREC=0x00 TTL=252 ID=34988 DF PROTO=UDP SPT=67 DPT=68 LEN=379"

[Styno]

i think the problems where becouse the VirtualServer... When i turned that of it did it... :D :eek: Now i have the firewall on and its working like hell :D I'm sorry to say this, but if you'd just followed the usersmanual you wouldn't have had so much trouble getting stuff working :rolleyes: But I'm glad it does...


But i have a few more questions.... :POh, oh :(

-With a hard disk of 120/160 gb... you need to make 5 or more partitions (FAT32 + WinXP) Is it than also possilbe as user of the ftp... from WAN to switch to another partition... because is would have now use to buy a 120/160 gb hdd....If you use a partition manager like Ranish or Partition Magic you can just create a single large FAT32 partition. Changing partitions with the standard ftp server of the WL-500g you cannot use more then 1 partition. Hmmm, well you might try creating symbolic links from the first partition to the others but I guess you need ext2 or ext3 filesystem for that.


-What does "Stay Timeout in Seconds: " ; "Login Timeout in Seconds:" means... in the menu "USB Application - FTP Server"?Dunno exactly. Read your manual (thats the 4th time I said that :)) and do a search on the forum. Don't bother these settings they are not particulary important.


-What does this mean in my SystemLog?

"Jan 1 01:00:23 user.warn klogd: ALERTIN=eth1 OUT= MAC=00:0e:a6:b7:ec:ba:00:0f:8f:7e:de:00:08:00 SRC=172.31.254.153 DST=213.73.174.253 LEN=399 TOS=0x00 PREC=0x00 TTL=252 ID=34988 DF PROTO=UDP SPT=67 DPT=68 LEN=379"Seems to me the firewall dropped an unsollicited UDP packet originating from 172.31.254.153:67 to port 68. You probably have firewall logging enabled, you can safely turn that off.

[wiz]

-What does "Stay Timeout in Seconds: " ; "Login Timeout in Seconds:" means... in the menu "USB Application - FTP Server"?


Stay timeout in secs = the time the asus waits on idle clients before it drops the connection.

Login timeout in secs = the time a login times out in secs. So if some one accesses your ftp server, this counter starts running. If they don't logon to the ftp server before this time runs out the connection gets dropped also.

[viNkmeiSter]

okay thx!

Can I set the timers that there is no time limit.. or is it just "0"?
(Can't find it in the manual ;))

And I go try something with Partition Magic... :D

[k7g2lm3]

Hi wiz,

Concerning ftp-timeouts:

I have per default 120 s for login and 240 s for stay timeout. So this means that if the user doesn't login again within 120 s, the connection will be dropped by the server. In this case, what is the importance of the stay timeout option? Can you give an example of an idle client(what does it mean exactly)?
Thanks in advance,
k7g2ml3

[viNkmeiSter]

Hi... a have another question about the partitions.... styno said


If you use a partition manager like Ranish or Partition Magic you can just create a single large FAT32 partition. Changing partitions with the standard ftp server of the WL-500g you cannot use more then 1 partition. Hmmm, well you might try creating symbolic links from the first partition to the others but I guess you need ext2 or ext3 filesystem for that.

Can I make a single FAT32 Partition of 160gb on a 160gb disk...??? is it then readable for WinXP... Cause I tought that it was impossilbe because the limit in WinXP that it only can discover FAT32 disks upto 32gb... Do I have te same problem with this router when I open the FTP page on a PC with WinXP...????

And what is ext2/ext3 filesystem... could you give me a review of that?

thx :D :cool:

[Styno]

Can I make a single FAT32 Partition of 160gb on a 160gb disk...??? is it then readable for WinXP... Cause I tought that it was impossilbe because the limit in WinXP that it only can discover FAT32 disks upto 32gb...Yes, the FAT32 specifications allows for partitions upto 2TB (AFAIK) but it gets less efficient when partition sizes grow. I have an 160GB HDD with a single large partition hooked up to the WL-500g and its working pretty good. Do a google search on FAT32 to learn more about it.

And what is ext2/ext3 filesystem... could you give me a review of that?Google is your friend.

I'm sorry to say but most of your questions can simply be answered by simply doing a search on this forum or using Google, so please try and find the answers yourself first before asking here. It saves us a lot of time :)

[Stingray]

I could need some help.
I have an USB 200Gig HDD attached to my WL500g.
I also can acces it by FTP-server.

SO FAR SO GOOD.... :o

But if i try to write something to the HDD it says i don't have the rights to do that.
I have all rights (read/write/erase) but somehow it doesn't work. :confused:

Does anyone got the aswer? :confused:

[barsju]

RTFM.
Try \\my.router\share$
Notice $-sign after share!

S.

[Stingray]

:confused: HUH ??? :confused:

[barsju]

Sorry. My bad. Mixed up samba and ftp..

Do you use username and password to access or anonymous access? Did you enable super user in web-admin? You should try with admin and normal password (super user)

S.

[Stingray]

:eek: Same there...
Error: 501 Error in parameters.

I log is as super user.
It just doesn't work.