[hylafax-users] R: 425 Cannot build data connection: Connection refused.

[Giuseppe Dia]

I'm fairly new with hylafax, so you would probably wait for a veteran answer
before trying this.
I would check if there's some firewall in the way.
In that case, as hylafax uses an ftp connection with a non-standard port, it
may be helpful to put in place the proper firewall rules.
I would advise against just taking down the firewall (anyhow it may be
useful for debugging purposes, if you're in a protected environment).
Simply opening the port 4559 toward the asterisk server would not
work(during an FTP session, the client has to prepare a port to receive data
from the server. The assignment of the port is dynamic, so no luck with a
fixed rule on the client)
Have you got Linux there? On Linux I just had to open the port on the server
toward the client and had to load the conntrack_ftp module with the
parameter ports=21,4559. In this way the nf_conntratck_ftp module knows that
4559 is ftp.
I think it should be the same on the client, so that the connection tracking
modules know that connection toward the 4559 is actually an ftp connection
and react accordingly.
Worked for me without taking down the firewall or have 'allow all' rules
between the server and client.
Regards,

Giuseppe Dia

>>and run sendfax -n -h tty...@192.168.1.10 12345 fax.pdf
>>i get error that :
>>425 Cannot build data connection: Connection refused.

>>please help to fix this problem.
>>thanks so much

____________________ HylaFAX(tm) Users Mailing List _______________________
To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe hylafax-us...@hylafax.org < /dev/null
*To learn about commercial HylaFAX(tm) support, mail sa...@ifax.com.*

[Lee Howard]

peter_green lion wrote:
> my system have 2 servers. one is asterisk server(192.168.1.11),
> another is hylafax server and iaxmodem(192.168.1.10).
> - i can send and receive fax from fax extensions.
> in asterisk server i install hylafax-client.

> and run sendfax -n -h tty...@192.168.1.10 12345 fax.pdf
> i get error that :
> 425 Cannot build data connection: Connection refused.
>
> please help to fix this problem.

Is the firewall on 192.168.1.10 configured to allow the connection?

Thanks,

Lee.

[Lee Howard]

peter_green lion wrote:
>
>
> > Date: Wed, 1 Dec 2010 17:30:44 -0800
> > From: fax...@howardsilvan.com
> > To: beter...@live.com
> > CC: hylafa...@hylafax.org
> > Subject: Re: [hylafax-users] 425 Cannot build data connection:

> Connection refused.
> >
> > peter_green lion wrote:
> > > my system have 2 servers. one is asterisk server(192.168.1.11),
> > > another is hylafax server and iaxmodem(192.168.1.10).
> > > - i can send and receive fax from fax extensions.
> > > in asterisk server i install hylafax-client.
> > > and run sendfax -n -h tty...@192.168.1.10 12345 fax.pdf
> > > i get error that :
> > > 425 Cannot build data connection: Connection refused.
> > >
> > > please help to fix this problem.
> >
> > Is the firewall on 192.168.1.10 configured to allow the connection?
> >
> > Thanks,
> >
> > Lee.
>

> hi Lee and all,
> in server 192.168.1.11(asterisk server) i run ftp 192.168.1.10 and it
> work ok.
> so how can i solve it ?

ftp and hfaxd operate on different ports.

Please look at the documentation that came with your Linux distribution
about the firewall (iptables).

[Lee Howard]

peter_green lion wrote:
>
>
> > Date: Wed, 1 Dec 2010 18:32:31 -0800

> hi Lee and all,
>
> iptables stop on server 192.168.1.10
>
> in this server i see:
>
> PORT STATE SERVICE
> 21/tcp open ftp
> 22/tcp open ssh
> 25/tcp open smtp
> 80/tcp open http
> 3306/tcp open mysql
> 4559/tcp open hylafax
> 10000/tcp open snet-sensor-mgmt
>
> in server 192.168.1.11 i run some command as:
>
> 1.root@a3:~# telnet 192.168.1.10 4559
> Trying 192.168.1.10...
> Connected to 192.168.1.10.
> Escape character is '^]'.
> 220 example.localhost.com server (HylaFAX (tm) Version 6.0.5) ready.
>
>
> 2. root@a3:~# ftp 192.168.1.10 4559
> Connected to 192.168.1.10.
> 220 example.localhost.com server (HylaFAX (tm) Version 6.0.5) ready.
> Name (192.168.1.10:root): root
> 230 User root logged in.
> Remote system type is UNIX.
> Using binary mode to transfer files.
> ftp>
>
> i a get the same error.

What error? With sendfax? With the firewall off on both the server and
the client systems run sendfax with the -vv option and report the output.