Solved

Problem with NT4 FTP server

Posted on 2002-03-25
12
315 Views
Last Modified: 2013-12-28
I'm having a problem with an NT4/SP6 system and FTP.  Anytime I or another user try to connect to it the following happens:

c:\DOCUME~1\joe\Desktop>ftp {ip_address}
Connected to {ip_address}.
220 nts2 Microsoft FTP Service (Version 4.0).
User ({ip_address}:(none)): {valid_username}
Connection closed by remote host.

c:\DOCUME~1\joe\Desktop>

So all attempts to connect just fail without any password prompt.  If I look at the FTP connection list on the server it shows this as being connected.  (But obviously it's not.)  I have no filters or other security settings in effect (that I know of).

Ideas?
0
Comment
Question by:jhance
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
12 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 6894016
I hope you have already done all the basic stuff.

1) Reboot server

2) Checked all event logs

3) reapply sp6a and any other relevant patches.

4) Check that this is not a virus of some kind.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar and blocked the response for FTP ?

I hope this helps !
0
 
LVL 32

Author Comment

by:jhance
ID: 6894242
1) Reboot server

Yes.

2) Checked all event logs


Here is what I get...

In the LOG file:

Y.Y.Y.Y, -, 3/25/02, 10:48:05, MSFTPSVC1, NTS2, 0.0.0.0, 14790427, 0, 0, 426, 10054, [32]closed, -, -,

In the event log:

User {username} at host x.x.x.x has timed-out after 900 seconds of inactivity.

3) reapply sp6a and any other relevant patches.

SP6A re-installed.

4) Check that this is not a virus of some kind.

Norton Anti scan runs clean.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

Hmmm, not sure where that is.

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar
and blocked the response for FTP ?

No firewall involved here and the router is wide open.  Another host on the same subnet (Linux) has no trouble with FTP from the same client.  So whatever is wrong it's specific to the NT box.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6895745
Joe,

Usually when multiple passive connections are made at the same time to a single FTP server it's possible to use up all available system threads for servicing clients. Any additional connection requests will result in the error you note until a client thread is available again. Is there a chance that the server is receiving multiple hits because of the open router, let's say from spammers or maybe cruising hackers?

Den
0
Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 
LVL 32

Author Comment

by:jhance
ID: 6896347
Dennis,

Thanks for the comment.  I don't think that is the issue since there doesn't seem to be any log file evidence of a large number of such hits.  Of course there are the usual "noise level" amount of these but nothing out of the ordinary.

I'll try closing the router temporarily, rebooting, and testing from the local subnet just to be sure.
0
 
LVL 32

Author Comment

by:jhance
ID: 6896354
BTW, what is a good way to:

1) Detect that such a thing is going on?
2) Put a stop to it if it is?

This machine needs to be exposed on the internet and is used as a semi-public FTP server.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6898428
What are you using to handle FTP, IIS? If yes, which version?

0
 
LVL 32

Author Comment

by:jhance
ID: 6898836
This is NT4/SP6 with IIS4.0.

I tried closing the router, rebooting the system, no change in behavior.

I ran NETSTAT and didn't find any out-of-the-ordinary connections in either type or quantity.

I never have trouble FTPing to the machine from itself.
0
 
LVL 25

Accepted Solution

by:
dew_associates earned 200 total points
ID: 6899521
0
 
LVL 1

Expert Comment

by:amoisant
ID: 6904019
try to telnet to the machine on port 21 like so telnet ftp.mycompany.com 21

If you don't get rejected you know the firewall or filters are allowing FTP>
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012705
Thanks JH
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012709
Joe, sorry for not responding appropriately, is this resolved?
0
 
LVL 32

Author Comment

by:jhance
ID: 7012715
I tried a number of things including your suggestion and somewhere along the way, the problem was resolved.  I think your patch had a positive effect.

Thanks.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
Configuring Remote Assistance for use with SCCM
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question