Project

General

Profile

Actions

Incident #22438

closed

FTP for ISPC Open Portal is not reachable from outside

Added by Leonardo Candela over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
_InfraScience Systems Engineer
Target version:
Start date:
Nov 18, 2021
Due date:
% Done:

100%

Estimated time:
Infrastructure:
VREName:
openportal.ispc.cnr.it

Description

It seems the FTP site we set up for openportal.ispc is not reachable from "external" clients

Status: Resolving address of openportal.ispc.cnr.it
Status: Connecting to 146.48.87.209:21...
Status: Connection established, waiting for welcome message...
Error: Connection timed out after 20 seconds of inactivity
Error: Could not connect to server


Files


Add

Subtasks


Add

Related issues

Related to ISTI Open Access - Support #22009: openportal.ispc.cnr.it: create the Joomla instanceClosedTommaso PiccioliSep 15, 2021

Delete relationActions
Related to ISTI Open Access - Feature #21891: Migrate OpenPortal machines to ubuntu 18.04Closed_InfraScience Systems EngineerJul 30, 2021

Delete relationActions

Updated by Andrea Dell'Amico over 2 years ago

GARR, or a private provider?

Updated by Leonardo Candela over 2 years ago

I'm testing it from a private provider

Updated by Tommaso Piccioli over 2 years ago

same problem from a garr node.

Updated by Andrea Dell'Amico over 2 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 50

I opened a request to the IIT networking group.

Actions #5

Updated by Andrea Dell'Amico over 2 years ago

  • Related to Support #22009: openportal.ispc.cnr.it: create the Joomla instance added
Actions #6

Updated by Andrea Dell'Amico over 2 years ago

  • Related to Feature #21891: Migrate OpenPortal machines to ubuntu 18.04 added

Updated by Andrea Dell'Amico over 2 years ago

@tommaso.piccioli@isti.cnr.it @leonardo.candela@isti.cnr.it did you use ftp over TLS? The IIT people say that ftp over TLS is already enabled, while plain FTP is blocked,

Updated by Tommaso Piccioli over 2 years ago

You are right, it is working using ftp explicit over TLS.

Updated by Leonardo Candela over 2 years ago

I didn't manage to connect neither by using ftpes:// nor ftps:// (I'm using Filezilla)

In particular when using ftps:// I see

Status: Resolving address of openportal.ispc.cnr.it
Status: Connecting to 146.48.87.209:21...
Status: Connection established, initializing TLS...
Error: GnuTLS error -15: An unexpected TLS packet was received.
Status: Connection attempt failed with "ECONNABORTED - Connection aborted".

ISPC colleague is reporting the same "issue" ... in attachment the config he is using.

Updated by Andrea Dell'Amico over 2 years ago

I just replicated the behaviour, trying from home. I'll ask the IIT people again.

Updated by Tommaso Piccioli over 2 years ago

Now it works (I think the IIT network group did somenting...), I have successfully connected from two different networks

Updated by Andrea Dell'Amico over 2 years ago

@leonardo.candela@isti.cnr.it can you get feedback from the ISPC collegue?

Updated by Leonardo Candela over 2 years ago

  • Status changed from Feedback to Closed
  • % Done changed from 50 to 100

ISPC colleague managed to connect, issue solved.

Updated by Michele Artini over 2 years ago

  • Status changed from Closed to In Progress

I reopen the ticket because ISPC colleagues have been reported frequent disconnections using FileZilla

I have obtained the same problem using my PC connected to the ISTI network, after few minutes of usage:

Stato:      Avvio download di /documents/2019/413302/info.txt
Stato:      Trasferimento file completato; trasferiti 276 byte in 1 secondo
Stato:      Disconnesso dal server
Errore:     Errore GnuTLS -15 in gnutls_record_recv: An unexpected TLS packet was received.
Errore:     Impossibile leggere dal socket: ECONNABORTED - Connessione interrotta
Errore:     Disconnesso dal server

Updated by Andrea Dell'Amico over 2 years ago

I do not understand. If there were no file transfer in action, the disconnection is the expected behaviour.

Updated by Tommaso Piccioli over 2 years ago

  • Status changed from In Progress to Feedback

It looks like an error caused by the filezilla client settings, it can use multiple simultaneous connections and there is an automatic timeout client-side, probably not acknowledge by the server, then the error, maybe due to some directory listing refresh. Next new connection from filezilla, trigged by a click on a directory or a upload/download request, will be succesfull if the password was saved.
It is possible to change timeout, number and frequency of retries and add a timestamp to the log.

Updated by Tommaso Piccioli over 2 years ago

@michele.artini@isti.cnr.it 5 minutes is the default timeout server-side for the idle connections, can we close this?

Updated by Leonardo Candela over 2 years ago

  • Status changed from Feedback to Closed

Mando una email per capire quale sia il problema ... รจ evidente che questo della disconnessione non lo sia ma lui ha parlato di problemi durante il download o l'upload.

Actions

Also available in: Atom PDF