Solved

Problem with NT4 FTP server

Posted on 2002-03-25
12
256 Views
Last Modified: 2013-12-28
I'm having a problem with an NT4/SP6 system and FTP.  Anytime I or another user try to connect to it the following happens:

c:\DOCUME~1\joe\Desktop>ftp {ip_address}
Connected to {ip_address}.
220 nts2 Microsoft FTP Service (Version 4.0).
User ({ip_address}:(none)): {valid_username}
Connection closed by remote host.

c:\DOCUME~1\joe\Desktop>

So all attempts to connect just fail without any password prompt.  If I look at the FTP connection list on the server it shows this as being connected.  (But obviously it's not.)  I have no filters or other security settings in effect (that I know of).

Ideas?
0
Comment
Question by:jhance
12 Comments
 
LVL 63

Expert Comment

by:SysExpert
Comment Utility
I hope you have already done all the basic stuff.

1) Reboot server

2) Checked all event logs

3) reapply sp6a and any other relevant patches.

4) Check that this is not a virus of some kind.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar and blocked the response for FTP ?

I hope this helps !
0
 
LVL 32

Author Comment

by:jhance
Comment Utility
1) Reboot server

Yes.

2) Checked all event logs


Here is what I get...

In the LOG file:

Y.Y.Y.Y, -, 3/25/02, 10:48:05, MSFTPSVC1, NTS2, 0.0.0.0, 14790427, 0, 0, 426, 10054, [32]closed, -, -,

In the event log:

User {username} at host x.x.x.x has timed-out after 900 seconds of inactivity.

3) reapply sp6a and any other relevant patches.

SP6A re-installed.

4) Check that this is not a virus of some kind.

Norton Anti scan runs clean.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

Hmmm, not sure where that is.

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar
and blocked the response for FTP ?

No firewall involved here and the router is wide open.  Another host on the same subnet (Linux) has no trouble with FTP from the same client.  So whatever is wrong it's specific to the NT box.
0
 
LVL 25

Expert Comment

by:dew_associates
Comment Utility
Joe,

Usually when multiple passive connections are made at the same time to a single FTP server it's possible to use up all available system threads for servicing clients. Any additional connection requests will result in the error you note until a client thread is available again. Is there a chance that the server is receiving multiple hits because of the open router, let's say from spammers or maybe cruising hackers?

Den
0
 
LVL 32

Author Comment

by:jhance
Comment Utility
Dennis,

Thanks for the comment.  I don't think that is the issue since there doesn't seem to be any log file evidence of a large number of such hits.  Of course there are the usual "noise level" amount of these but nothing out of the ordinary.

I'll try closing the router temporarily, rebooting, and testing from the local subnet just to be sure.
0
 
LVL 32

Author Comment

by:jhance
Comment Utility
BTW, what is a good way to:

1) Detect that such a thing is going on?
2) Put a stop to it if it is?

This machine needs to be exposed on the internet and is used as a semi-public FTP server.
0
 
LVL 25

Expert Comment

by:dew_associates
Comment Utility
What are you using to handle FTP, IIS? If yes, which version?

0
The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

 
LVL 32

Author Comment

by:jhance
Comment Utility
This is NT4/SP6 with IIS4.0.

I tried closing the router, rebooting the system, no change in behavior.

I ran NETSTAT and didn't find any out-of-the-ordinary connections in either type or quantity.

I never have trouble FTPing to the machine from itself.
0
 
LVL 25

Accepted Solution

by:
dew_associates earned 200 total points
Comment Utility
0
 
LVL 1

Expert Comment

by:amoisant
Comment Utility
try to telnet to the machine on port 21 like so telnet ftp.mycompany.com 21

If you don't get rejected you know the firewall or filters are allowing FTP>
0
 
LVL 25

Expert Comment

by:dew_associates
Comment Utility
Thanks JH
0
 
LVL 25

Expert Comment

by:dew_associates
Comment Utility
Joe, sorry for not responding appropriately, is this resolved?
0
 
LVL 32

Author Comment

by:jhance
Comment Utility
I tried a number of things including your suggestion and somewhere along the way, the problem was resolved.  I think your patch had a positive effect.

Thanks.
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Join & Write a Comment

A few months ago I had an issue with LaserJet 1020 printer which was installed to XP and Windows 7.  It was installed to XP and working, but when I tried to connect from a Windows 7 PC, it would attempt connection and then fail.  Sometimes the Spool…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now