Incident #22438
closedFTP for ISPC Open Portal is not reachable from outside
100%
Description
It seems the FTP site we set up for openportal.ispc is not reachable from "external" clients
Status: Resolving address of openportal.ispc.cnr.it
Status: Connecting to 146.48.87.209:21...
Status: Connection established, waiting for welcome message...
Error: Connection timed out after 20 seconds of inactivity
Error: Could not connect to server
Files
Subtasks
Related issues
Updated by Andrea Dell'Amico about 3 years ago
GARR, or a private provider?
Updated by Leonardo Candela about 3 years ago
I'm testing it from a private provider
Updated by Tommaso Piccioli about 3 years ago
same problem from a garr node.
Updated by Andrea Dell'Amico about 3 years ago
- Status changed from New to Feedback
- % Done changed from 0 to 50
I opened a request to the IIT networking group.
Updated by Andrea Dell'Amico about 3 years ago
- Related to Support #22009: openportal.ispc.cnr.it: create the Joomla instance added
Updated by Andrea Dell'Amico about 3 years ago
- Related to Feature #21891: Migrate OpenPortal machines to ubuntu 18.04 added
Updated by Andrea Dell'Amico about 3 years ago
@tommaso.piccioli@isti.cnr.it @leonardo.candela@isti.cnr.it did you use ftp over TLS? The IIT people say that ftp over TLS is already enabled, while plain FTP is blocked,
Updated by Tommaso Piccioli about 3 years ago
You are right, it is working using ftp explicit over TLS.
Updated by Leonardo Candela about 3 years ago
I didn't manage to connect neither by using ftpes:// nor ftps:// (I'm using Filezilla)
In particular when using ftps:// I see
Status: Resolving address of openportal.ispc.cnr.it
Status: Connecting to 146.48.87.209:21...
Status: Connection established, initializing TLS...
Error: GnuTLS error -15: An unexpected TLS packet was received.
Status: Connection attempt failed with "ECONNABORTED - Connection aborted".
ISPC colleague is reporting the same "issue" ... in attachment the config he is using.
Updated by Andrea Dell'Amico about 3 years ago
I just replicated the behaviour, trying from home. I'll ask the IIT people again.
Updated by Tommaso Piccioli about 3 years ago
Now it works (I think the IIT network group did somenting...), I have successfully connected from two different networks
Updated by Andrea Dell'Amico about 3 years ago
@leonardo.candela@isti.cnr.it can you get feedback from the ISPC collegue?
Updated by Leonardo Candela about 3 years ago
- Status changed from Feedback to Closed
- % Done changed from 50 to 100
ISPC colleague managed to connect, issue solved.
Updated by Michele Artini about 3 years ago
- Status changed from Closed to In Progress
I reopen the ticket because ISPC colleagues have been reported frequent disconnections using FileZilla
I have obtained the same problem using my PC connected to the ISTI network, after few minutes of usage:
Stato: Avvio download di /documents/2019/413302/info.txt Stato: Trasferimento file completato; trasferiti 276 byte in 1 secondo Stato: Disconnesso dal server Errore: Errore GnuTLS -15 in gnutls_record_recv: An unexpected TLS packet was received. Errore: Impossibile leggere dal socket: ECONNABORTED - Connessione interrotta Errore: Disconnesso dal server
Updated by Andrea Dell'Amico about 3 years ago
I do not understand. If there were no file transfer in action, the disconnection is the expected behaviour.
Updated by Tommaso Piccioli about 3 years ago
- Status changed from In Progress to Feedback
It looks like an error caused by the filezilla client settings, it can use multiple simultaneous connections and there is an automatic timeout client-side, probably not acknowledge by the server, then the error, maybe due to some directory listing refresh. Next new connection from filezilla, trigged by a click on a directory or a upload/download request, will be succesfull if the password was saved.
It is possible to change timeout, number and frequency of retries and add a timestamp to the log.
Updated by Tommaso Piccioli about 3 years ago
@michele.artini@isti.cnr.it 5 minutes is the default timeout server-side for the idle connections, can we close this?
Updated by Leonardo Candela about 3 years ago
- Status changed from Feedback to Closed
Mando una email per capire quale sia il problema ... รจ evidente che questo della disconnessione non lo sia ma lui ha parlato di problemi durante il download o l'upload.