Solved

Problem with NT4 FTP server

Posted on 2002-03-25
12
281 Views
Last Modified: 2013-12-28
I'm having a problem with an NT4/SP6 system and FTP.  Anytime I or another user try to connect to it the following happens:

c:\DOCUME~1\joe\Desktop>ftp {ip_address}
Connected to {ip_address}.
220 nts2 Microsoft FTP Service (Version 4.0).
User ({ip_address}:(none)): {valid_username}
Connection closed by remote host.

c:\DOCUME~1\joe\Desktop>

So all attempts to connect just fail without any password prompt.  If I look at the FTP connection list on the server it shows this as being connected.  (But obviously it's not.)  I have no filters or other security settings in effect (that I know of).

Ideas?
0
Comment
Question by:jhance
12 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 6894016
I hope you have already done all the basic stuff.

1) Reboot server

2) Checked all event logs

3) reapply sp6a and any other relevant patches.

4) Check that this is not a virus of some kind.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar and blocked the response for FTP ?

I hope this helps !
0
 
LVL 32

Author Comment

by:jhance
ID: 6894242
1) Reboot server

Yes.

2) Checked all event logs


Here is what I get...

In the LOG file:

Y.Y.Y.Y, -, 3/25/02, 10:48:05, MSFTPSVC1, NTS2, 0.0.0.0, 14790427, 0, 0, 426, 10054, [32]closed, -, -,

In the event log:

User {username} at host x.x.x.x has timed-out after 900 seconds of inactivity.

3) reapply sp6a and any other relevant patches.

SP6A re-installed.

4) Check that this is not a virus of some kind.

Norton Anti scan runs clean.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

Hmmm, not sure where that is.

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar
and blocked the response for FTP ?

No firewall involved here and the router is wide open.  Another host on the same subnet (Linux) has no trouble with FTP from the same client.  So whatever is wrong it's specific to the NT box.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6895745
Joe,

Usually when multiple passive connections are made at the same time to a single FTP server it's possible to use up all available system threads for servicing clients. Any additional connection requests will result in the error you note until a client thread is available again. Is there a chance that the server is receiving multiple hits because of the open router, let's say from spammers or maybe cruising hackers?

Den
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 32

Author Comment

by:jhance
ID: 6896347
Dennis,

Thanks for the comment.  I don't think that is the issue since there doesn't seem to be any log file evidence of a large number of such hits.  Of course there are the usual "noise level" amount of these but nothing out of the ordinary.

I'll try closing the router temporarily, rebooting, and testing from the local subnet just to be sure.
0
 
LVL 32

Author Comment

by:jhance
ID: 6896354
BTW, what is a good way to:

1) Detect that such a thing is going on?
2) Put a stop to it if it is?

This machine needs to be exposed on the internet and is used as a semi-public FTP server.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6898428
What are you using to handle FTP, IIS? If yes, which version?

0
 
LVL 32

Author Comment

by:jhance
ID: 6898836
This is NT4/SP6 with IIS4.0.

I tried closing the router, rebooting the system, no change in behavior.

I ran NETSTAT and didn't find any out-of-the-ordinary connections in either type or quantity.

I never have trouble FTPing to the machine from itself.
0
 
LVL 25

Accepted Solution

by:
dew_associates earned 200 total points
ID: 6899521
0
 
LVL 1

Expert Comment

by:amoisant
ID: 6904019
try to telnet to the machine on port 21 like so telnet ftp.mycompany.com 21

If you don't get rejected you know the firewall or filters are allowing FTP>
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012705
Thanks JH
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012709
Joe, sorry for not responding appropriately, is this resolved?
0
 
LVL 32

Author Comment

by:jhance
ID: 7012715
I tried a number of things including your suggestion and somewhere along the way, the problem was resolved.  I think your patch had a positive effect.

Thanks.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 2008 Server C Drive too full 25 74
domain controllers numbers 4 77
Problem to file 13 41
32bit v 64bit processes and impact on memory 7 47
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question