Page 1 of 1

IBM mainframe z/OS FTPS client

Posted: 2007-10-22 18:33
by hiroskagit2
Hi,

My Client is using IBM mainframe z/OS FTPS client to connect to the FTPS on Filezilla server, but it seems like FTPS server fails to respond after they establish the connect over control port 990.
Client on Windows/Linux/Unix is working fine except IBM mainframe.

does anyone know how to fix this issue?

Thank you for your support!

Posted: 2007-10-24 09:06
by botg
I need logs with debug level set to 3.

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-06 19:36
by throwback45
Does this issue have a resolution? I'm having the exact same issue. It appears to be something to do with Implicit/Explicit capabilities of Zilla or Z/os.

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-06 22:12
by botg
I'm having the exact same issue
Yep, the exact same issue to fail to provide the requested logs

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-11 19:19
by throwback45
(000010) 8/11/2008 15:23:09 PM - (not logged in) (IP)> Connected, sending welcome message...
(000010) 8/11/2008 15:23:29 PM - (not logged in) (IP)> disconnected.
(000011) 8/11/2008 15:23:35 PM - (not logged in) (IP)> Connected, sending welcome message...
(000011) 8/11/2008 15:23:55 PM - (not logged in) (IP)> disconnected.

There's the log. It doesn't really show much. I forgot to add I'm going through a PIX firewall with all of the necessary ports open. However, is there a firewall rule which could be blocking the AUTH command?

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-11 19:25
by botg
Quite possible, but I have no experience with your particular firewall.

According to the log there's still some firewall sabotaging the connection.

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-19 14:04
by insightpcs
i recommend disabling all firewalls, testing it then enabling each firewall one by one until you find the one that is breaking the connection

Re: IBM mainframe z/OS FTPS client

Posted: 2008-08-19 18:33
by da chicken
Cisco is notorious for mucking about with FTP and SMTP commands and responses.

IIRC, you need to issue a 'no fixup protocol ftp' command to turn off Cisco's fixup protocol (which I've heard referred to as cockup :P ), and you many need to disable inspection, too. This is a security risk in as the PIX will not protect you from any FTP exploits, but if your systems are patched then that's not as much of a concern.