Updating fw via ftp

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • pez
    Technician
    • Jul 2015
    • 12

    Updating fw via ftp

    We've traditionally installed new fw via USB, but want to move across to using ftp.

    I've got a test machine in front of me (c454e) and we've created an ftp server that is (or appears to be) working. FTP server has no firewall/av for testing purposes, and we can access the files within it across the network without needing to log in (set to anonymous authentication, and Everyone and Anonymous is set as a security permission with read access).

    I've created a .tar of the fw using the bat file in the firmware download, and placed that tar file in the root of the ftp.

    My service mode settings are as follows:

    Service Mode
    Machine Update Settings
    Internet ISW

    Internet ISW Set
    Function Setting = ON
    Open Mode Setting = ON

    FTP Setting
    Data Aqcuisition Setting = ON
    Connection Setting
    Port = 21
    Connection Time Out = 1min
    PASV Mode = OFF

    Forwarding Access Setting
    User ID = blank
    PW = blank
    URL = my ftp server
    Filename = name of .tar file created by bat file in download

    When I go to the Download section and click Download, I get an NG message (no error codes). When I attempt to download via
    "Admin mode -> Network -> Machine Update Settings -> Internet ISW Settings -> FTP Server Setting ->
    Firmware Update Parameters" I see it says Failed in the Firmware Download Status box after I click Firmware Download.

    Do I also need to set proxy setting for FTP in "Admin mode -> Network -> Machine Update Settings -> Internet ISW Settings -> FTP Server Setting" via a browser? I've tried both with the proxy server address entered here and left blank here, but I get NG when

    I've tried switching basic authentication on in iis on my win10 machine and using an account name and password (which allows me to log into the ftp from other PCs using my credentials), and tried with it off (allowing a completely anonymous login - no credentials required), but both result in NG in the Download section.

    Copier is on a static IP, ftp appears to be OK, wondering what else I can look at to get this working. Does anyone use FTP to update the fw on these machines?
  • feracampos
    Technician

    Site Contributor
    • Jul 2021
    • 40

    #2
    Re: Updating fw via ftp

    Originally posted by pez
    We've traditionally installed new fw via USB, but want to move across to using ftp.

    I've got a test machine in front of me (c454e) and we've created an ftp server that is (or appears to be) working. FTP server has no firewall/av for testing purposes, and we can access the files within it across the network without needing to log in (set to anonymous authentication, and Everyone and Anonymous is set as a security permission with read access).

    I've created a .tar of the fw using the bat file in the firmware download, and placed that tar file in the root of the ftp.

    My service mode settings are as follows:

    Service Mode
    Machine Update Settings
    Internet ISW

    Internet ISW Set
    Function Setting = ON
    Open Mode Setting = ON

    FTP Setting
    Data Aqcuisition Setting = ON
    Connection Setting
    Port = 21
    Connection Time Out = 1min
    PASV Mode = OFF

    Forwarding Access Setting
    User ID = blank
    PW = blank
    URL = my ftp server
    Filename = name of .tar file created by bat file in download

    When I go to the Download section and click Download, I get an NG message (no error codes). When I attempt to download via
    "Admin mode -> Network -> Machine Update Settings -> Internet ISW Settings -> FTP Server Setting ->
    Firmware Update Parameters" I see it says Failed in the Firmware Download Status box after I click Firmware Download.

    Do I also need to set proxy setting for FTP in "Admin mode -> Network -> Machine Update Settings -> Internet ISW Settings -> FTP Server Setting" via a browser? I've tried both with the proxy server address entered here and left blank here, but I get NG when

    I've tried switching basic authentication on in iis on my win10 machine and using an account name and password (which allows me to log into the ftp from other PCs using my credentials), and tried with it off (allowing a completely anonymous login - no credentials required), but both result in NG in the Download section.

    Copier is on a static IP, ftp appears to be OK, wondering what else I can look at to get this working. Does anyone use FTP to update the fw on these machines?

    Interested on this too.

    Comment

    • techsxge
      Senior Tech

      Site Contributor
      500+ Posts
      • Jan 2022
      • 661

      #3
      Re: Updating fw via ftp

      Originally posted by feracampos
      Interested on this too.
      I had it working once, have not used it because ftp is extremly unsafe even as a local server. The ftp protocol is nearly 40 years old and even Microsoft tries to stop using it by now, the same company that uses their printer spooling mechanism since XP.
      I'll give it a little try tomorrow and see if i can dig up my documentation to do this.
      There are safer ways than ftp tho

      Comment

      • JasonSBE
        Trusted Tech

        Site Contributor
        100+ Posts
        • Apr 2014
        • 180

        #4
        Re: Updating fw via ftp

        What OS are you running? Windows 10 built-in firewall disables ftp requests by default. May need to make sure that ftp traffic is permitted.

        Comment

        • slimslob
          Retired

          Site Contributor
          25,000+ Posts
          • May 2013
          • 35067

          #5
          Re: Updating fw via ftp

          Originally posted by JasonSBE
          What OS are you running? Windows 10 built-in firewall disables ftp requests by default. May need to make sure that ftp traffic is permitted.
          OS of the computer is a mute issue as he is talking about sending firmware by FTP to a KM c454e. IMHO it is an extremely bad idea. The amount of damage that a hacker can do by accessing that FTP server is unlimited, and that includes using it as a backdoor into your entire network.

          Comment

          • rrrohan
            Service Manager

            Site Contributor
            1,000+ Posts
            • Sep 2011
            • 1971

            #6
            Re: Updating fw via ftp

            try setting credentials instead of leaving it blank.

            we used to always use credentials but i havent bothered using it for many years as was really only used instead of CF cards.

            I seem to recall retrying it on the 8 series but since firmware isnt just a single TAR file anymore i wasnt sure what to point it to so gave up

            Comment

            • techsxge
              Senior Tech

              Site Contributor
              500+ Posts
              • Jan 2022
              • 661

              #7
              Re: Updating fw via ftp

              Originally posted by slimslob
              OS of the computer is a mute issue as he is talking about sending firmware by FTP to a KM c454e. IMHO it is an extremely bad idea. The amount of damage that a hacker can do by accessing that FTP server is unlimited, and that includes using it as a backdoor into your entire network.
              Finally someone here who understands the risk of having a ftp server in your network even locally... ILY

              Comment

              • JasonSBE
                Trusted Tech

                Site Contributor
                100+ Posts
                • Apr 2014
                • 180

                #8
                Re: Updating fw via ftp

                Originally posted by slimslob
                OS of the computer is a mute issue as he is talking about sending firmware by FTP to a KM c454e. IMHO it is an extremely bad idea. The amount of damage that a hacker can do by accessing that FTP server is unlimited, and that includes using it as a backdoor into your entire network.

                How is the OS an moot issue? The computer is where the firmware file is transmitted. Therefore, the OS that computer is running is relevant. And yes, FTP is not a safe method of updating firmware if you're doing it across a network, but you can still setup a FTP server a computer, and plug it directly into the MFP with a patch cable, and put manual network settings on both the MFP and the PC and update using internet ISW via FTP. I did it all the time on the old C353/C253/C203 systems because we had a lot of issue getting CF cards that would work.

                Comment

                • slimslob
                  Retired

                  Site Contributor
                  25,000+ Posts
                  • May 2013
                  • 35067

                  #9
                  Re: Updating fw via ftp

                  Originally posted by JasonSBE
                  The computer is where the firmware file is transmitted.
                  He was not talking about send to the computer, he was talking about sending firmware from the computer to the copier. A free FTP client is built into nearly every OS and can be accessed from the command line in any Microsoft OS.

                  Comment

                  • JasonSBE
                    Trusted Tech

                    Site Contributor
                    100+ Posts
                    • Apr 2014
                    • 180

                    #10
                    Re: Updating fw via ftp

                    Originally posted by slimslob
                    He was not talking about send to the computer, he was talking about sending firmware from the computer to the copier. A free FTP client is built into nearly every OS and can be accessed from the command line in any Microsoft OS.
                    Yes. The file is TRANSMITTED from the computer. Ergo, if the computer is running windows 10 or possibly even 8 and definitely 11, he should check the firewall settings.

                    Comment

                    • bsm2
                      IT Manager

                      25,000+ Posts
                      • Feb 2008
                      • 27454

                      #11
                      Re: Updating fw via ftp

                      Updating the firmware of this machine

                      Comment

                      • slimslob
                        Retired

                        Site Contributor
                        25,000+ Posts
                        • May 2013
                        • 35067

                        #12
                        Re: Updating fw via ftp

                        With most major corporate and school IT departments have worked with, if they found out that the c454e was on their network with an enabled FTP server, that c454e and any other piece of equipment would immediately be replaced by equipment from another vendor and everyone from the company pez works for would be permanently banned.

                        Comment

                        • techsxge
                          Senior Tech

                          Site Contributor
                          500+ Posts
                          • Jan 2022
                          • 661

                          #13
                          Re: Updating fw via ftp

                          Originally posted by slimslob
                          With most major corporate and school IT departments have worked with, if they found out that the c454e was on their network with an enabled FTP server, that c454e and any other piece of equipment would immediately be replaced by equipment from another vendor and everyone from the company pez works for would be permanently banned.

                          well well, and then you hear someone saying school IT departments are stupid and old fashioned when it comes to security... Doesnt sound like it.
                          Thumbs up to any IT departments that does this. They are deffo on the right path.

                          Comment

                          • slimslob
                            Retired

                            Site Contributor
                            25,000+ Posts
                            • May 2013
                            • 35067

                            #14
                            Re: Updating fw via ftp

                            Originally posted by techsxge
                            well well, and then you hear someone saying school IT departments are stupid and old fashioned when it comes to security... Doesnt sound like it.
                            Thumbs up to any IT departments that does this. They are deffo on the right path.
                            That depends on the school. I worked with high school and elementary school districts. They had to be good in order to deal with teachers. My daughter is a Computer Science and Engineering Professor at a Cal State University. The only person at the IT Department that they trust to touch the Computer Science computers is a former student of hers.

                            Comment

                            • techsxge
                              Senior Tech

                              Site Contributor
                              500+ Posts
                              • Jan 2022
                              • 661

                              #15
                              Re: Updating fw via ftp

                              Originally posted by slimslob
                              That depends on the school. I worked with high school and elementary school districts. They had to be good in order to deal with teachers. My daughter is a Computer Science and Engineering Professor at a Cal State University. The only person at the IT Department that they trust to touch the Computer Science computers is a former student of hers.
                              aaaaaand this makes me happy to hear too, since all schools i worked with seems to never had their knowledge of IT updated since well the 2000's to say it politely. I have some better swearwords on hand rn but i dont feel like thats appropiate right now. You know what i want to say i hope.

                              Heads up to your daughter then, she must be doing one heck of a job then.

                              Comment

                              Working...