Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Wiggs]

As... yes I missed that in your other post. 

Good point.... much easier than multiple forwarding from router -> router -> FTP server.

Wiggs

[tfiveash]

Since he did not say whether he was setting up the DDNS in the router or the DNS-323 one thing I remember from a while back is if you set up your DDNS in the DNS-323 it will report the ip of the 323 and not the external address of the network.  This sounds like the case here since when he checks the ip he gets 192.168.xx.xx which is the address of the 323.  It is better to set up your DDNS in the router instead.  It will handle the external address correctly.
Also, remember if he has 2 active routers the first if not set right will have the outside world address but will output a 192.168.xx.xx address to the wan of the second router.  If the DDNS is setup in the second router it wll see the incoming address as 192.168.xx.xx since that is what it is getting on the wan.  That would screw up the address that the DDNS reports.  It would report 192.168.xx.xx because that is what it sees as the outside world. Remember the only device that knows what the outside world address is would be the first router.

Terry

[fordem]

Remember the only device that knows what the outside world address is would be the first router.

Whilst the general point made in the post is a valid one (which has actually been covered in the posts immediately preceding) it is based on an invalid assumption - how a dynamic DNS client works.

Yes - the only device that knows what the outside world address is would be the first router - but - the "non router" dynamic DNS clients don't report their own ip address, in fact, they don't report any ip address at all - they contact the dynamic DNS server with an update request, and the server checks the source ip of the request, which, because of the NAT processes used, will be that of the so-called "first" router.

Regardless of how many routers you daisy-chain together, as long as you are using NAT, the router will insert it's own WAN address as the source address and make an entry in it's NAT tables so that it knows which internal ip to use when the response comes back.

[tfiveash]

Thanks Fordem for the enlightening update on how DDNS works.  Boy do I have egg on my face and I will have to tell the guy that told me how it worked he was all wong.

One question I do have is does this request have anything to do with pinging the router?  The reason I ask is the router can be set so it will not respond to a ping.  Will it still respond to the DDNS request?

Thanks for the enlightened update.

Terry

[fordem]

DDNS updates will work whether or not ping is enabled.

[william.walker87]

Ok Guys update is:

Lesson 1. Do not turn DHCP off on a clearwire modem. There is no hard reset button so this will brick the modem.
 
Everything on my end is set correctly except one thing. Clearwire remote accessed my computer checking everything. Set me up in DMZ and then tried port forwarding on the actual modem.

Lesson 2. Clearwire modems (this is motorola brand) likes and sometimes will only accept 1400MTU. DNS-323 cannot (that we could find) be changed from 1500 MTU.

I am going to upgrade to fw1.08 and see how it goes. Comments and ideas are appreciated

[gunrunnerjohn]

Put a router in front of that useless modem and isolate yourself from it's oddities.

[william.walker87]

Well I upgraded the firmware and we are making progress.

Here is my latest test log

Test log
Status: Resolving address of thewalkersinhawaii.selfip.com
Status: Connecting to 75.95.246.212
Status: Connected, waiting for welcome message
Reply: 220---------- Welcome to Pure-FTPd [TLS] ----------
Reply: 220-You are user number 1 of 10 allowed.
Reply: 220-Local time is now 07:53. Server port: 24147.
Reply: 220-This server supports FXP transfers
Reply: 220 You will be disconnected after 2 minutes of inactivity.
Status: CLNT http://ftptest.net on behalf of 75.95.xx.xxx
Reply: 530 You aren't logged in
Status: USER anonymous
Reply: 230 Anonymous user logged in
Status: FEAT
Reply: 211-Extensions supported:
Reply: EPRT
Reply: IDLE
Reply: MDTM
Reply: SIZE
Reply: REST STREAM
Reply: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Reply: MLSD
Reply: ESTP
Reply: PASV
Reply: EPSV
Error: Carriage return without line feed received


From FileZilla I get this whole thing and this is the exact same settings as the other log:

Response:   220---------- Welcome to Pure-FTPd [TLS] ----------
Response:   220-You are user number 1 of 10 allowed.
Response:   220-Local time is now 07:49. Server port: 24147.
Response:   220-This server supports FXP transfers
Response:   220 You will be disconnected after 2 minutes of inactivity.
Command:   USER testing
Response:   331 User testing OK. Password required
Command:   PASS ********
Response:   230 OK. Current restricted directory is /
Status:   Connected
Status:   Retrieving directory listing...
Command:   PWD
Response:   257 "/" is your current location
Command:   TYPE I
Response:   200 TYPE is now 8-bit binary
Command:   PORT 98,155,166,161,94,93
Response:   200 PORT command successful
Command:   MLSD
Error:   Connection timed out
Error:   Failed to retrieve directory listing

As far as I can tell, and if I were an expert this whole deal would probably be working already, i am getting to the server and then for some reason it will not give me the directory listing? Is that about right?

FTP is the bane of my existence

[fordem]

You're apparently trying to use passive ftp without configuring the DNS-323 and the router correctly - the first listing shows a PASV command which is the request to switch to passive ftp, the second listing shows a PORT command which is used to set the address and port to be used for the data connection.

Change the ftp client settings so that it's not using passive ftp and it should connect and work.

ftp is unique in that it requires two connections, a control connection and a data connection.  With active ftp the control connection is made from the client to the server and the data connection from the server to the client - with passive ftp both connections are made from client to server.

Each type of ftp has advantages and disadvantages - in my opinion active ftp using the standard port settings is the easiest to configure, however, some folk feel that this is inherently insecure.

I'm not going to get into a debate on security here, I will just say that I use it and have been for the better part of a decade without any issues and I'll continue to use it.

What I suggest you do is first configure active ftp with standard ports and after you have that working then look at improving the security.