DOS FTP problems

[Jim]

Is there anyway to put dos into passv mode? Our network is ran behind an ISA
firewall/proxy machine and I'm trying to use a batch file from symantec that
connects to their ftp site, downloads a file which, I belive, copies an
*.xdb (virus definition) file over to the appropriate folder on the local
drive. To be honest, I don't know if it's a passive mode problem or not
because I can connect using dos FTP. Once I'm there, I can't do a directory
listing or anyhting. It always return an error: ">ftp: bind: Can't assign
requested address"

I run through the ftp statements manually and can navigate up through the
directories fine but if I try to do a dir listing (dir or ls) or try to use
the "get navup8.exe" command once i've navigated down to the approrpriate
directory, I get the same ">ftp: bind: Can't assign requested address"
error. I've used graphical FTP programs and can do everything just fine.

Here is their batch code:

ftp -s:cescript.txt
call "%systemdrive%\navup8.exe"
move %systemdrive%\*.xdb <path>
del /q %systemdrive%\navup8.exe


Here is the cescript text file that the batch refers to

open ftp.symantec.com
anonymous
(e-mail address removed)
cd public/english_us_canada/antivirus_definitions/norton_antivirus/static
lcd C:\
bin
hash
prompt
get navup8.exe
quitAny ideas? Anyone?Thanks,Jim

 

[Bill Stewart]

Is there anyway to put dos into passv mode?

I think you mean: "Can the command-line ftp client on Windows 2000 or later
operate in PASV mode?" AFAIK, the answer is no. (There is no DOS in Windows
NT, 2000, or XP.)

Once I'm there, I can't do a directory listing or anyhting. It always
return an error: ">ftp: bind: Can't assign requested address"

You are correct: The most likely explanation for this behavior is that the
firewall is not allowing the connection.

I would suggest exploring other alternatives to solve your problem. One
would be to use Symantec's tools for managing the updates to your AV
clients. Another would be to use a different scriptable ftp tool, such as
wget, but how well this works may depend on if the ISA firewall is
requiring authentication.

HTH,

Bill

 

[Jim]

Actually, I am the administrator of our ISA server. I have limited protocols
available to our users but for our IS department group, we are allowed all
protocols and all sites. I have no problems connecting to any ftp site using
a graphical FTP program like ftpx or wsftp. Those programs can list,
download, upload, .. the works. Even the command line ftp program connects
ok. It (the command line ftp) just doesn't want to do a directory listing or
"get". Just gives back that "ftp: bind" Can't assign requested address"
error. I can navigate through the directory structure of the remote ftp site
as long as I already know the directories to navigate through.

This occurs on not only my AV server but my own workstation as well. I do
have full administrative rights on both machines.

Sure, I can use the automatic liveupdate on the primary symantec av server,
but symantec explains that it's best to download their *.xdb file and
manually put that into the sav program folder. They state that for the other
av servers within the group to update properly from the primay server, you
should use the *.xdb instead of the intelligent updater or liveupdate. Also,
using live update seems to be a few days behind (what it downloads) from
what the actual downloadable definition set is.

So, that led me to the batch file. This batch file came directly from
symantec's website along with the instructions on its use located here:
http://service1.symantec.com/SUPPOR...sf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=

I'll keep working on it .. but you're probably right on having to look into
other options. Sure, it's not difficult for me to just download the *.xdb
file myself every other day and manually insert it into the proper folder,
but it's even easier to set up a schedule batch job and forget about it.
Lazy is sometimes good!

Thanks,

Jim

 

[Bill Stewart]

Actually, I am the administrator of our ISA server.

Good! Then you should be familiar with how ftp works.

I have no problems connecting to any ftp site using a graphical FTP
program like ftpx or wsftp.

This is probably because you're running them in PASV mode, which is the
default on most (?) GUI ftp clients (at least the ones I've looked at).
AFAIK, you cannot use the native command-line ftp tool to run in PASV mode.

This occurs on not only my AV server but my own workstation as well.

Of course...everything's behind the ISA Server.

AFAIK, Symantec provides a "live update admin" utility (I used to work in a
Symantec AV shop, but it's been over a year and a half). That should allow
you to specify a proxy server for your connections.

In any case, your question is really more of an ISA Server question than a
command prompt question, so I'd post in one of the ISA Server groups or on
www.isaserver.org.

Regards,

Bill