[zorp-hu] Bad PASV params
Gabor E. Tusnady
zorp-hu@lists.balabit.hu
Tue, 27 Apr 2004 08:08:21 +0200
--=-W8bSK3P3+mJpzMnAlYHI
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Sziasztok,
Kicsit kesve, de most tudom kuldeni a kert 9-es loglevellel keszult
logot. Ebben tobb erdekesseg is van, az egyik a Bad PASV (128 sor es
kornyeke), masik egy 'Possibly bounce attack' uzenet a 172-es sorban.
Minden segitseget elore is koszonok,
tusi
--
Gabor E. Tusnady, PhD | e-mail: tusi@enzim.hu
Institute of Enzymology, BRC | www: http://www.enzim.hu/~tusi
Hungarian Academy of Sciences | tel: (36-1) 279-3159
H-1113 Budapest Karolina ut 29 | fax: (36-1) 466-5465
*****************************************************************
On Tue, 2004-04-20 at 09:10, SZALAY Attila wrote:
> Meg kellene nezni, hogy mit kuld a szerver. Tippem szerint a zarojeleket
> hagyja le. (A legjobb az lenne, ha vagy egy 9-es loglevellel keszult
> logot, vagy egy szerver oldali tcpdump-ot tudnal nekem kuldeni, es akkor
> meg tudom mondani, hogy mi a bibi es, hogy hogyan lehet orvosolni.
> (A hibauzenetet javitottam, a kov verzioban mar tobb mindent fog
> mondani)
--=-W8bSK3P3+mJpzMnAlYHI
Content-Disposition: attachment; filename=ftp.log
Content-Type: text/plain; name=ftp.log; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Apr 27 07:46:38 fal i2o_ftp[30776]: core.session(5): (z/io_ftp): Starting service; name='io_ftp'
Apr 27 07:46:38 fal i2o_ftp[30776]: core.debug(8): (z/io_ftp): Connection accepted; client_address='AF_INET(172.16.7.7:34924)'
Apr 27 07:46:38 fal i2o_ftp[30776]: core.session(3): (z/io_ftp:2): Starting proxy instance; client_fd='15', client_address='AF_INET(172.16.7.7:34924)', client_zone='Zone(intra, 172.16.0.0/16)', client_local='AF_INET(out.ftp.server.ip:21)'
Apr 27 07:46:38 fal i2o_ftp[30776]: core.session(5): (z/io_ftp:2/ftp): Proxy starting; class='FtpProxyRW', module='ftp'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): thread starting;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling __config__() event;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling config() event;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Attribute fetched; attribute='request', value='<Zorp hash object at 0x8115438>'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x80a7f20>'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Attribute changed; attribute='permit_unknown_command', newvalue='0'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='max_hostname_length', value='128'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='target_port_range', value=''21''
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='data_port_max', value='41000'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='masq_address_server', value=''''
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='request', value='<Zorp hash object at 0x8115438>'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='timeout', value='300000'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='permit_unknown_command', value='0'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='transparent_mode', value='1'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='permit_empty_command', value='1'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='max_line_length', value='255'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='max_username_length', value='32'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='max_password_length', value='64'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='response_strip_msg', value='0'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='data_port_min', value='40000'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='masq_address_client', value=''''
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='response', value='<Zorp Multidimensional hash object at 0x80a7f20>'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(6): (z/io_ftp:2/ftp): Config dump, attribute value; name='data_mode', value='0'
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(7): (z/io_ftp:2/ftp): Config event done;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling __startup__() event;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Attribute fetched; attribute='ftpDataStop', value='<Zorp method object at 0x8140eb0>'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling startUp() event;
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(7): (z/io_ftp:2/ftp): Startup event done;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): Connecting to remote host; protocol='1', local='NULL', remote='AF_INET(out.ftp.server.ip:21)'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): Initiating connection; from='NULL', to='AF_INET(out.ftp.server.ip:21)'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Established connection; protocol='1', remote='AF_INET(out.ftp.server.ip:21)', local='AF_INET(tuz.fal.ip:53108)', dest='AF_INET(out.ftp.server.ip:21)'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.session(3): (z/io_ftp:2/ftp): Server connection established; server_fd='18', server_address='AF_INET(out.ftp.server.ip:21)', server_zone='Zone(inter, 0.0.0.0/0)', server_local='AF_INET(tuz.fal.ip:53108)'
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='21'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 32 30 20 46 65 61 74 75 72 65 73 3A 20 61 20 220 Features: a
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 70 20 2E 0D 0A p ...
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='220', rsp_prm='Features: a p .'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='21'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 32 30 20 46 65 61 74 75 72 65 73 3A 20 61 20 220 Features: a
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 70 20 2E 0D 0A p ...
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='13'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 41 55 54 48 20 47 53 53 41 50 49 0D 0A AUTH GSSAPI..
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`AUTH' req_prm='GSSAPI'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='27'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 35 30 30 20 45 72 72 6F 72 20 70 61 72 73 69 6E 500 Error parsin
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 67 20 63 6F 6D 6D 61 6E 64 0D 0A g command..
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.policy(3): (z/io_ftp:2/ftp): Request Rejected; req='AUTH'
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='18'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 41 55 54 48 20 4B 45 52 42 45 52 4F 53 5F 56 34 AUTH KERBEROS_V4
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 0D 0A ..
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`AUTH' req_prm='KERBEROS_V4'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='27'
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 35 30 30 20 45 72 72 6F 72 20 70 61 72 73 69 6E 500 Error parsin
Apr 27 07:46:38 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 67 20 63 6F 6D 6D 61 6E 64 0D 0A g command..
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.policy(3): (z/io_ftp:2/ftp): Request Rejected; req='AUTH'
Apr 27 07:46:38 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='16'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 55 53 45 52 20 61 6E 6F 6E 79 6D 6F 75 73 0D 0A USER anonymous..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`USER' req_prm='anonymous'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='16'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 55 53 45 52 20 61 6E 6F 6E 79 6D 6F 75 73 0D 0A USER anonymous..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='57'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 33 30 20 48 69 2E 20 4E 6F 20 6E 65 65 64 20 230 Hi. No need
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 74 6F 20 6C 6F 67 20 69 6E 3B 20 49 27 6D 20 61 to log in; I'm a
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 6E 20 61 6E 6F 6E 79 6D 6F 75 73 20 66 74 70 20 n anonymous ftp
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 73 65 72 76 65 72 2E 0D 0A server...
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='230', rsp_prm='Hi. No need to log in; I'm an anonymous ftp server.'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='57'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 33 30 20 48 69 2E 20 4E 6F 20 6E 65 65 64 20 230 Hi. No need
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 74 6F 20 6C 6F 67 20 69 6E 3B 20 49 27 6D 20 61 to log in; I'm a
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 6E 20 61 6E 6F 6E 79 6D 6F 75 73 20 66 74 70 20 n anonymous ftp
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 73 65 72 76 65 72 2E 0D 0A server...
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='5'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 50 57 44 0D 0A PWD..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`PWD' req_prm=''
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='5'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 50 57 44 0D 0A PWD..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='10'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 35 37 20 22 2F 22 20 0D 0A 257 "/" ..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='257', rsp_prm='"/" '
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='10'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 35 37 20 22 2F 22 20 0D 0A 257 "/" ..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='6'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 53 59 53 54 0D 0A SYST..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`SYST' req_prm=''
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='6'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 53 59 53 54 0D 0A SYST..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='19'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 31 35 20 55 4E 49 58 20 54 79 70 65 3A 20 4C 215 UNIX Type: L
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 38 0D 0A 8..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='215', rsp_prm='UNIX Type: L8'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='19'
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 31 35 20 55 4E 49 58 20 54 79 70 65 3A 20 4C 215 UNIX Type: L
Apr 27 07:46:42 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 38 0D 0A 8..
Apr 27 07:46:42 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:44 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='6'
Apr 27 07:46:44 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 50 41 53 56 0D 0A PASV..
Apr 27 07:46:44 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:44 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`PASV' req_prm=''
Apr 27 07:46:44 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='6'
Apr 27 07:46:44 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 50 41 53 56 0D 0A PASV..
Apr 27 07:46:44 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='27'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 32 37 20 3D 31 33 30 2C 32 33 37 2C 32 35 2C 227 =130,237,25,
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 30 2C 32 32 32 2C 38 32 0D 0A 20,222,82..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='227', rsp_prm='=130,237,25,20,222,82'
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.violation(2): (z/io_ftp:2/ftp): Bad PASV params;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.policy(3): (z/io_ftp:2/ftp): Rejected answer; from='227 =130,237,25,20,222,82', to='500 Error parsing PASV parameters'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='35'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 35 30 30 20 45 72 72 6F 72 20 70 61 72 73 69 6E 500 Error parsin
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 67 20 50 41 53 56 20 70 61 72 61 6D 65 74 65 72 g PASV parameter
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 73 0D 0A s..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='25'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 50 4F 52 54 20 31 37 32 2C 31 36 2C 37 2C 37 2C PORT 172,16,7,7,
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 31 33 36 2C 31 30 39 0D 0A 136,109..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`PORT' req_prm='172,16,7,7,136,109'
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(6): (z/io_ftp:2/ftp): Resetting data connection;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): SockAddrInetRange, successfully bound; min_port='40000', max_port='41000', port='40641'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): Start to listen; fd='19'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='27'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 50 4F 52 54 20 31 39 33 2C 36 2C 32 39 2C 32 35 PORT tuz,fal,net,25
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 34 2C 31 35 38 2C 31 39 33 0D 0A 4,158,193..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='11'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 30 30 20 4F 6B 61 79 2E 0D 0A 200 Okay...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='200', rsp_prm='Okay.'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='11'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 30 30 20 4F 6B 61 79 2E 0D 0A 200 Okay...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='6'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 4C 49 53 54 0D 0A LIST..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`LIST' req_prm=''
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='6'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 4C 49 53 54 0D 0A LIST..
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='35'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 31 35 30 20 4D 61 6B 69 6E 67 20 74 72 61 6E 73 150 Making trans
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 66 65 72 20 63 6F 6E 6E 65 63 74 69 6F 6E 2E 2E fer connection..
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 2E 0D 0A ...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='150', rsp_prm='Making transfer connection...'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='35'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 31 35 30 20 4D 61 6B 69 6E 67 20 74 72 61 6E 73 150 Making trans
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 66 65 72 20 63 6F 6E 6E 65 63 74 69 6F 6E 2E 2E fer connection..
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 2E 0D 0A ...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.policy(3): (z/io_ftp:2/ftp): Possibly bounce attack; connect='FALSE', side='server', remote='AF_INET(130.237.25.19:56915)'
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(6): (z/io_ftp:2/ftp): Resetting data connection;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Closing channel; fd='20'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.accounting(4): (z/io_ftp:2/ftp): accounting info; type='stream', duration='0', sent='0', received='0'
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='14'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 32 36 20 53 75 63 63 65 73 73 2E 0D 0A 226 Success...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from both side;
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='226', rsp_prm='Success.'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='14'
Apr 27 07:46:45 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 32 36 20 53 75 63 63 65 73 73 2E 0D 0A 226 Success...
Apr 27 07:46:45 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='2'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: FF F4 ..
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='7'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: F2 41 42 4F 52 0D 0A .ABOR..
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`ABOR' req_prm=''
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='1'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: F2 .
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='6'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 41 42 4F 52 0D 0A ABOR..
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='45'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 35 30 32 20 53 6F 72 72 79 2C 20 49 20 64 6F 6E 502 Sorry, I don
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 27 74 20 75 6E 64 65 72 73 74 61 6E 64 20 74 68 't understand th
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 61 74 20 63 6F 6D 6D 61 6E 64 2E 0D 0A at command...
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='502', rsp_prm='Sorry, I don't understand that command.'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='45'
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 35 30 32 20 53 6F 72 72 79 2C 20 49 20 64 6F 6E 502 Sorry, I don
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 27 74 20 75 6E 64 65 72 73 74 61 6E 64 20 74 68 't understand th
Apr 27 07:46:55 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 61 74 20 63 6F 6D 6D 61 6E 64 2E 0D 0A at command...
Apr 27 07:46:55 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Reading channel; fd='15', count='6'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 51 55 49 54 0D 0A QUIT..
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from client side;
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.request(6): (z/io_ftp:2/ftp): Request fetched; req=`QUIT' req_prm=''
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Writing channel; fd='18', count='6'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 51 55 49 54 0D 0A QUIT..
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/server): Reading channel; fd='18', count='10'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/server): data line: 32 32 31 20 42 79 65 2E 0D 0A 221 Bye...
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.debug(8): (z/io_ftp:2/ftp): Reading from server side;
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.reply(6): (z/io_ftp:2/ftp): Response arrived; rsp='221', rsp_prm='Bye.'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(7): (z/io_ftp:2/ftp/client): Writing channel; fd='15', count='10'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.dump(9): (z/io_ftp:2/ftp/client): data line: 32 32 31 20 42 79 65 2E 0D 0A 221 Bye...
Apr 27 07:47:01 fal i2o_ftp[30947]: ftp.debug(6): (z/io_ftp:2/ftp): Resetting data connection;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling __shutdown__() event;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling shutDown() event;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(7): (z/io_ftp:2/ftp): calling __destroy__() event;
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp): Proxy destroy; class='FtpProxyRW', module='ftp'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp/client): Shutdown channel; fd='15', mode='2'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp/client): Closing channel; fd='15'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp/server): Shutdown channel; fd='18', mode='2'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.debug(6): (z/io_ftp:2/ftp/server): Closing channel; fd='18'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.session(5): (z/io_ftp:2/ftp): Proxy ending; class='FtpProxyRW', module='ftp'
Apr 27 07:47:01 fal i2o_ftp[30947]: core.session(4): (z/io_ftp:2): E
--=-W8bSK3P3+mJpzMnAlYHI--