Subject: install/24762: install kernel ftp client should disable epsv4 by default for firewalls
To: None <gnats-bugs@gnats.netbsd.org>
From: None <toddpw@netbsd.org>
List: netbsd-bugs
Date: 03/13/2004 01:02:44
>Number:         24762
>Category:       install
>Synopsis:       install kernel ftp enables epsv4 and hangs with firewall
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    install-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sat Mar 13 01:03:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Todd Whitesel
>Release:        NetBSD 1.6.2
>Organization:
	NetBSD Developer
>Environment:
System: NetBSD reg11 1.6.2 NetBSD 1.6.2 (GENERIC) #0: Wed Feb 11 07:11:23 UTC 2004     autobuild@tgm.netbsd.org:/autobuild/netbsd-1-6-PATCH002/shark/OBJ/autobuild/netbsd-1-6-PATCH002/src/sys/arch/shark/compile/GENERIC shark
Architecture: arm
Machine: shark
>Description:
	install kernel ftp enables epsv4 by default, which causes problems with
	some firewalls.
>How-To-Repeat:
	Attempt to do an FTP install from behind a firewall which does not
	allow incoming connections to your address. Note that when FTP enters
	Extended Passive Mode, it is dead in the water after that.
>Fix:
	exit sysinst and clean up /mnt mounts
	cat >>.netrc
	default
	macdef init
	epsv4 off

	^D	(preceded by a blank line)
	re-run sysinst and find that it works now.
>Release-Note:
>Audit-Trail:
>Unformatted: