05/13/03 Ftp With Firewall in Place

[zye]

i would suggest that you test/configure your firewall first on a server wich is not used by paying customers.



zye

[thecomputerpro]

I use CuteFTP and do not have any issues. I am able to connect fine.

The better security idea on the Matrix side I think I a good thing. If you are one of the ones having and issue, what firewall are sitting behind and/or what NAT device are yiou behind? For the most part, if you are using a decent device then it to should not be giving you issuse because they are usually smart enought to realize FTP requires both ports for communicat and when it sees the port 20 coming back, it routs back to you. But if your using a not so decent device then you may be sol unless your sitting outside of it and I do not think you can get all over matrix for this because it is the client side that has the issues.

Just my 2 cents.

[zye]

Originally posted by thecomputerpro
I use CuteFTP and do not have any issues. I am able to connect fine.

The better security idea on the Matrix side I think I a good thing. If you are one of the ones having and issue, what firewall are sitting behind and/or what NAT device are yiou behind? For the most part, if you are using a decent device then it to should not be giving you issuse because they are usually smart enought to realize FTP requires both ports for communicat and when it sees the port 20 coming back, it routs back to you. But if your using a not so decent device then you may be sol unless your sitting outside of it and I do not think you can get all over matrix for this because it is the client side that has the issues.

Just my 2 cents.

i am vortech/martix customer ( have a dedicated server)- i am behind a router ( software with ipchains ) no firewall installed and i am not the only one having this issue - customers on my side they call / write mails to me and no its not on the clientside

I do not think you can get all over matrix for this because it is the client side that has the issues.

I sure can do this.

I have SSH running on a high port ( security reasons ) i am not able to connect anymore.


MY IP RANGE IS STILL DOWN !
When is this issue solved ?

zye

[dwhite]

Originally posted by thecomputerpro
I use CuteFTP and do not have any issues. I am able to connect fine.

The better security idea on the Matrix side I think I a good thing. If you are one of the ones having and issue, what firewall are sitting behind and/or what NAT device are yiou behind? For the most part, if you are using a decent device then it to should not be giving you issuse because they are usually smart enought to realize FTP requires both ports for communicat and when it sees the port 20 coming back, it routs back to you. But if your using a not so decent device then you may be sol unless your sitting outside of it and I do not think you can get all over matrix for this because it is the client side that has the issues.

Just my 2 cents.

thecomputerpro, you of all people should realize that there are several ways to configure internal network security, some to address specific problems that another network is not having to deal with. To say that someone's network is not decent because it does not automatically work with a change like this that was not announced ahead of time is very unprofessional. I'm willing to deal with what is my responsibility, and I'm not unhappy that Matrix is trying to provide better security. But changes like this can produce unexpected results, and because it was initiated by them, I feel that they should take some responsibility in working through the issues that crop up.

P.S. I will add, that so far, they have been working with us. Cheers!

[Brangwyn]

I know passive FTP uses any thing from 1024 UP if we open that up then we might as well have no firewall..

Not really Brad, there are many commercial well known firewalls that leave these ports open because the risk to ports > 1024 is very small compared to < 1024.

Out of curiosity, what ports were the recent DDoS attacks on ?

I still think we (the resellers) need to work on an FAQ to help people out on this, I know I've got some complete Net tards that are going to have a hard time with this .. its taken me months to ween a couple of them off Frontpage and on to FTP heh.

[dwhite]

Originally posted by Brangwyn
I still think we (the resellers) need to work on an FAQ to help people out on this, I know I've got some complete Net tards that are going to have a hard time with this .. its taken me months to ween a couple of them off Frontpage and on to FTP heh.

Hear hear Brangwyn! I'm facing the same issue. However, the funny thing is that because FrontPage uses HTTP protocol to connect, it should not be affected. Go figure!

[Brangwyn]

I uploaded tons of new material to my site last night via Dreamweaver so I can tell you that it DOES work.

Good to know

The customer that I had with problems must have had a firewall then and not realised it (one of those Net tards I mentioned above) only PASV would work for them, I guess now I'm going to have to find out what they and likely others have as firewalls.

it should not be affected. Go figure!

Yeah you can see the tears in my eyes cant ya

[zye]

i got notice 17 hours ago - that you oviously blocking all ports over 1024.

i am also providing shoutcast streaming service -how can you just block all high ports ?

IP RANGE STILL DOWN

still unable to connect to shell cause i am running it on a high port

what are you "tech-guy" doing ?

i have work to do and you block it

please work on my 2 support tickets i send 2,5 hours ago

numbers are: #63453 and #63500

in hope
zye

[zye]

your support is practically not existing - i called you guys - nobody was ansering the phone so i left a message - send 2 support tickets - msgéd via icq 4 hours ago brad about my issues and N O T H I N G was done till now.


NOT ABLE TO LOGIN ( ssh running on high port )

IP RANGE STILL DOWN

[Vixen]

You may want to take a breathe and relax or you are going to have a stroke. Brad is not answering on ICQ because he is WORKING.

They are obviously aware there is a problem as you have now posted 4 or 5 times being nothing more than rude AND submitted duplicate tickets. Which by the way, causes it to take us longer to reply to tickets when people send in the same thing over and over.

BTW, maybe you should wait longer than 10 minutes between rantings.

[zye]

i am trying to relax but my phone just dont let me

i am rude ? what do you expect ?

what would you do

oh my freinds peace i am patient so please bring my server back online my dear customers love it oh its so gorgious

man wake up

Zye, Alan has answered your tickets and your ports are wide open for your IP addresses. If you are still having issues you should submit a new ticket or reply to the one that Alan has answered.

Also we do not call outside of the US so if you left a message you will not be getting a call back. Our techs are available 24 hours a day 7 days a week, so if you got the voice mail it is because the techs on staff were already assisting other customers on the phone.

[Vixen]

Originally posted by zye
i am trying to relax but my phone just dont let me

i am rude ? what do you expect ?

what would you do

oh my freinds peace i am patient so please bring my server back online my dear customers love it oh its so gorgious

man wake up

See, there you go again with the sarcasm. I gotta say, if you were a customer of MY site I would probably not reply to you for hours because being rude is not the way to get someone to help you. At least it doesn't work with me.

Also, Lindsey has pointed out the problem has been rectified and your tickets have been answered. So, if you are STILL having a problem submit a TT because posting here is not gonna get the issue resolved.

[thecomputerpro]

Originally posted by zye
i am vortech/martix customer ( have a dedicated server)- i am behind a router ( software with ipchains ) no firewall installed and i am not the only one having this issue - customers on my side they call / write mails to me and no its not on the clientside





I sure can do this.

I have SSH running on a high port ( security reasons ) i am not able to connect anymore.


zye

What we are talking about then is many different issues then right? Colo is different than shared and the colo customer should be able to define what security they want in front of their own machine. I agree with you on this one.

I will bow out here and let Matrix get it done. I am sure they will make it right and will work with you on the issues.

[admin]

zye, as I told you on ICQ at 9am today we were working on the issue. All of your ports are open. To come here and say our support is not existing is one not true and just plan wrong. I worked with you my self and let you know we were working on the issue..

All of your IPs are wide open to the outside world now nothing is blocked for any of your IP ranges. Even if they were you would of been able to ping them today as we did not block that. To me it looked like you had not even added them to your server as I could not ping them from inside the network with NO firewall and could not ping it from outside ether.. So it really had nothing to do with the firewall issue from what I can tell...