Re: [hylafax-users] using faxsend/faxstat behind a nat firewall - REVISITED - how does the passive connection work?

["Chris Weiss" <cweiss@xxxxxxxxx>]

On 9/10/07, Eric Peers <peers@xxxxxxxxxx> wrote:
> I have test machine/client sitting behind a Linksys wrt54gl router. Our
> main server is not firewalled at all. I adjusted the hosts.hfaxd file on
> the main server to let me login/check status.
>
> When I try to use faxsend/faxstat from my test machine, it fails. It
> hangs while waiting for a response from the server. (LIST status).

is the client using PASV?  if not, you won't get past the NAT.

being based o FTP the "data" comes in on a different, out of band,
connection that's only alive as long as the transfer takes.  This
allows the primiary, or control, connection to give transfer status
and interrupt cleanly and that sort of thing.  there are 2 options for
the data channel, normal and passive.  Normal mode works by the client
giving the server and IP and port to connect to, then the server
connects back tot eh client and sends the data.  this obviously won't
work behind NAT.  PASV works by the server giving the client an IP and
port to connect to and the client connects and downloads the data,
this will work behind NAT, as long as you don't block outgoing ports.

IIRC, hfaxd supports PASV, make sure the client uses it.


____________________ HylaFAX(tm) Users Mailing List _______________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
 On UNIX: mail -s unsubscribe hylafax-users-request@xxxxxxxxxxx < /dev/null
  *To learn about commercial HylaFAX(tm) support, mail sales@xxxxxxxxx*