[bpatin@padecs.riss.net: Re: bin/44570: ftp behind VPN server fails host name lookup]

[Kris Kennaway]

The following reply was made to PR bin/44570; it has been noted by GNATS.

From: Kris Kennaway <kris at obsecurity.org>
To: freebsd-gnats-submit at FreeBSD.org
Cc:  
Subject: [bpatin at padecs.riss.net: Re: bin/44570: ftp behind VPN server fails host name lookup]
Date: Mon, 14 Jul 2003 14:32:49 -0700

 Adding to audit trail
 
 ----- Forwarded message from Bruce Patin <bpatin at padecs.riss.net> -----
 
 X-Original-To: kkenn at localhost
 Delivered-To: kkenn at localhost.obsecurity.org
 X-Originating-IP: [128.125.38.123]
 Delivered-To: kris at freebsd.org
 From: "Bruce Patin" <bpatin at padecs.riss.net>
 To: "Kris Kennaway" <kris at freebsd.org>
 Subject: Re: bin/44570: ftp behind VPN server fails host name lookup
 Date: Mon, 14 Jul 2003 13:47:26 -0400
 X-Priority: 3
 X-MSMail-Priority: Normal
 X-Mailer: Microsoft Outlook Express 6.00.2600.0000
 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
 X-RISSTag-Status-GTWY: Yes
 X-Bogosity: No, tests=bogofilter, spamicity=0.000000, version=0.13.7.2
 
 Attached is the console output of the tcpdump.
 BTW I am no longer behind a NAT, just a firewall.
 If you want a more detailed or binary dump, let me know.
 
 ----- Original Message ----- 
 From: "Kris Kennaway" <kris at FreeBSD.org>
 To: <bpatin at padecs.riss.net>; <kris at FreeBSD.org>; <freebsd-bugs at FreeBSD.org>
 Sent: Sunday, July 13, 2003 2:47 AM
 Subject: Re: bin/44570: ftp behind VPN server fails host name lookup
 
 
 Synopsis: ftp behind VPN server fails host name lookup
 
 State-Changed-From-To: open->feedback
 State-Changed-By: kris
 State-Changed-When: Sat Jul 12 23:46:45 PDT 2003
 State-Changed-Why: 
 Can you please obtain a tcpdump trace showing the TCP traffic
 made by the ftp client (particularly the DNS requests)?
 
 http://www.freebsd.org/cgi/query-pr.cgi?pr=44570
 
 
 
 ----- End forwarded message -----
 
 
 13:04:32.454520 padecstst.padecs.net.3718 > magloclenwall-in.riss.net.domain:  35652+ AAAA? ftp.perl.org. (30)
 13:04:32.497985 padecstst.padecs.net.3719 > magloclenwall-in.riss.net.domain:  62155+ PTR?
 +1.5.12.10.in-addr.arpa. (40)
 13:04:32.498249 magloclenwall-in.riss.net.domain > padecstst.padecs.net.3719:  62155 1/1/1 PTR[|domain] (DF)
 13:04:32.710686 magloclenwall-in.riss.net.domain > padecstst.padecs.net.3718:  35652 NXDomain 1/0/0
 +CNAME[|domain] (DF)
 13:04:32.710832 padecstst.padecs.net.3720 > magloclenwall-in.riss.net.domain:  35653+ A? ftp.perl.org. (30)
 13:04:32.711044 magloclenwall-in.riss.net.domain > padecstst.padecs.net.3720:  35653 NXDomain 1/0/0
 +CNAME[|domain] (DF)
 13:04:32.711124 padecstst.padecs.net.3721 > magloclenwall-in.riss.net.domain:  35654+ AAAA?
 +ftp.perl.org.padecs.net. (41)
 13:04:32.711335 magloclenwall-in.riss.net.domain > padecstst.padecs.net.3721:  35654 NXDomain 0/1/0 (117) (DF)
 13:04:32.711389 padecstst.padecs.net.3722 > magloclenwall-in.riss.net.domain:  35655+ A?
 +ftp.perl.org.padecs.net. (41)
 13:04:32.711588 magloclenwall-in.riss.net.domain > padecstst.padecs.net.3722:  35655 NXDomain 0/1/0 (117) (DF)