HI Brian,

I have open 50000-51000 on udp, but with no success. May other ports will have 
to be opened using udp?

Lydia


On Mon, 22 Jun 2015, [log in to unmask] wrote:

>
> Hi Lydia, could you also try opening these ports to UDP traffic? ( If I remember correctly some comms traffic is sent as UDP not TCP).
> Regards
> Brian
>
> -----Original Message-----
> From: DiRAC Users [mailto:[log in to unmask]] On Behalf Of Lydia Heck
> Sent: 19 June 2015 17:30
> To: [log in to unmask]
> Subject: Re: Transferring a test file...
>
>
> Hi Jens,
>
> I run a tcpdump -v -v "dst or src portrange 50000-51000"
>
> and then I ran an
> fts-transfer-submit -s s
> https://lcgfts3.gridpp.rl.ac.uk:8443/services/FileTransfer  -v gsiftp://data.cosma.dur.ac.uk:2811/etc/hosts
> srm://130.246.181.169/castor/ads.rl.ac.uk/prod/vo.dirac.ac.uk/DiRAC/tape/user/brian/deleteme-bylydia-4
>
> and I get that data.cosma.dur.ac.uk talks via 50614 to
> lcgfts09.gridpp.rl.ac.uk.pcsync-https:  and
>
> lcgfts09.gridpp.rl.ac.uk.pcsync-https > data.cosma.dur.ac.uk.50614
>
> so there seems to be some activity on those ephemeral ports, but the transfer still fails
>
> Lydia
>
>
> On Fri, 19 Jun 2015, Jensen, Jens (STFC,RAL,SC) wrote:
>
>> Thanks, Sam. Lydia and I tried connecting on port 50500 (her TCP port
>> range being 50K-51K) and it worked fine but we should probably also test 50000. Yesterday when I tcpdumped a connection from my cloud machine the data channel never appeared in the dump, but then it would have been blocked at RAL's firewall too.
>>
>> On 19/06/2015 15:04, Samuel Skipsey wrote:
>>
>>       So, I'm not sure about the firewall config at Durham, but I do know that the Durham Grid admins had a very long to-and-fro with Durham Network/IT in
>>       order to get good transfer performance. The solution, IIRC, was quite a complex ACL list of allowed remote endpoints on the University firewall?
>>       I know that DiRAC has some similar exemptions to the Grid site at Durham, but it might be worth checking just how comprehensive they are...
>>
>>       Sam
>>
>>       Sent from my Sony XperiaT smartphone
>>
>>
>>
>>       ---- Jensen, Jens (STFC,RAL,SC) wrote ----
>>
>>       More stuff. I was baffled that the transfer was not successful (particularly following the promising stuff Lydia and I managed to do in our long call
>>       yesterday), and I now have got some super-detailed logs from FTS.
>>
>>       But before we go into that, I tried transferring the file from RAL to Glasgow (as dteam) and it worked fine. Glasgow to srm-dirac at RAL worked fine.
>>       Glasgow to Durham failed.
>>
>>       So it looks like the problem is at the Durham end, or the problem is with FTS transferring to a plain gsiftp endpoint?
>>
>>       Incidentally, I have tried with both new and old flavour proxies.
>>
>>       One obvious step would be to try to transfer a file from Durham but that means finding a way of listing directories...
>>
>>       Cheers
>>       -j
>>
>>
>>
>>
>