AceBIT

I store my password list on an ftp server and just recently started having an issue opening the list if I open it with 'read-only' unchecked. If it's unchecked (which is always how I open the list) it takes about 60 seconds before it will finally open. Then, when I try to save the list, I get error code 12030: connection with server terminated abnormally. However, if I check 'read-only' before I open the list, it loads immediately.

Do you know what the problem might be? I've tried uninstalling password depot and reinstalling, but that didn't help. I have version 3.1.6. Thanks.

Does anyone have any suggestions? I can't save any passwords at this point.

Hello,

What operating system do you use? Are you working with admin rights or in a restricted user account? What firewalls and other security products are installed on your computer or in your network (hardwarefirewalls)?

_____________________
Best regards
Mirko - AceBIT - Support

I'm running Windows XP SP2, admin rights. I have ZoneAlarm installed and I have a hardware firewall (router DGL-4300).

I completely uninstalled ZoneAlarm and rebooted, but the problem remained. I was finally able to track down the problem to my router. I found this in my router log each time I tried to open my remote password list:

Thu Sep 20 21:31:21 2007 Blocked outgoing TCP packet from [FTP Server IP]:21 to [My Computer IP]:1501 with unexpected acknowledgement 2639037805 (expected 2638906749 to 2639037804)

My router uses SPI [Stateful Packet Inspection] and it has always been on, but now for some reason theres a problem with the Password Depot FTP traffic. I went ahead and disabled SPI on my router for now and that fixed the problem, but I'd rather keep it on. I haven't had a problem with any other software - my FTP clients (WSFTP,Dreamweaver,PHPed) have all been working perfectly, which I assume all use the same FTP protocol as Password Depot. Is this a problem with Password Depot itself, or is the problem elsewhere?

Thanks.

Hello,

Thanks a lot for the information, we will forward this to the responsible product manager, so that he can try to reproduce the error here - maybe some of the PD 3 ftp code is non standard, so that your SPI firewall blocks it.

_____________________
Best regards
Mirko - AceBIT - Support

Hello,

The difference between using Read-Only and Write mode with FTP server is that in the last case Password Depot creates a small temp file with information about 'locked file' and uploads that small file right after you open a .psw file from the server.

Apparently your router allows Password Depot downloading files via FTP but not uploading, at least with respect to those temp files. These temp files (they have extension .flg and stored in \Internet\ subdir of your passwords directory) are small and have content like:

Date=wE5D2wf71sbRvWwqlsZDXJwqw84Cg3MhyQO4IFZbdg8=
IP=hlbmb8r6V7/TeEGn5GNAdg==
HDD=2xpX6Xjr2b/nIsKn/osbng==

I guess for some reason that 'Stateful Packet Inspection' system considers such content as probably dangerous . Does not your router documentation provide more information what code 2639037805 exactly means?

We will investigate this issue and try to find a solution.

Best regards

I don't believe 2639037805 is actually an error code. I thinks that's the acknowledgment number of the TCP packet. The log says that it's expecting an acknowledgment number in the range of 2638906749 to 2639037804. That number varies each time I try to download the password list. I noticed that in each case the unexpected acknowledgment is always 1 greater than the expected range. Below are 3 log entries for 3 different attempts I made at downloading the password list so you can see what I mean:

Fri Sep 21 15:58:43 2007 Blocked outgoing TCP packet from [FTP Server IP]:21 to [My Computer IP]:3946 with unexpected acknowledgement 2657760863 (expected 2657629807 to 2657760862)

Fri Sep 21 15:58:41 2007 Blocked outgoing TCP packet from [FTP Server IP]:21 to [My Computer IP]:3941 with unexpected acknowledgement 3144514379 (expected 3144383323 to 3144514378)

Fri Sep 21 15:58:41 2007 Blocked outgoing TCP packet from [FTP Server IP]:21 to [My Computer IP]:3943 with unexpected acknowledgement 2308750748 (expected 2308619692 to 2308750747)


I'm guessing that there's a problem with the TCP packet itself. I don't know much about TCP packets, so I might be completely off here.

-