2026-09-22T12:10:52  <matrix-o-o> <foursixnine> Hi folks! we have an issue between openqa.o.o and ftp.suse.com, I opened a ticket some time ago and was for a while on the SUSE side, but seems public ftp is working for anonymous logins again, but not within the openQA network: https://progress.opensuse.org/issues/204981#note-8 is this something somebody can help with?
2026-09-22T12:12:50  <matrix-o-o> <Lubos Kocman> foursixnine: would it help if I would try to escalate internally? but if this is on heroes side then you're already raising it in the best place
2026-09-22T12:33:36  <matrix-o-o> <foursixnine> Shared the SD ticket with you, but thinking that from external networks it works, it is likely that is an infra issue on the openqa.o.o network
2026-09-22T12:49:32  <acidsys> foursixnine: are you sure you are trying passive FTP
2026-09-22T12:50:56  <acidsys> from your minimal output the connection client -> server appears fine and the server is able to send a response. otherwise post the full output like ggardet did
2026-09-22T13:01:15  <matrix-o-o> <foursixnine> acidsys: Sure, is just hat the output didnt vary... anyway added it in the ticket, but here's what I get:
2026-09-22T13:16:33  <acidsys> 425 Security: Bad IP connecting. - the FTP server might have a problem with NAT (between oQA and OBS networks you might not go via the internet but through an internal address). imo you need to work with administrators of the FTP server (OBS team) to find a solution. I'm not sure it's possible to solve on the client side. on the server a hack would be pasv_promiscuous. but first they should
2026-09-22T13:16:34  <acidsys> check which source address they find your connection originating from to confirm the theory
2026-09-22T13:19:57  <acidsys> a more clean solution might be to provide an internal address/domain to connect to which avoids going via the public/NATted address
2026-09-22T13:20:38  <acidsys> well, the cleanest would be not using FTP protocol, obviously ;) anyways