?
Solved

Problem with NT4 FTP server

Posted on 2002-03-25
12
Medium Priority
?
319 Views
Last Modified: 2013-12-28
I'm having a problem with an NT4/SP6 system and FTP.  Anytime I or another user try to connect to it the following happens:

c:\DOCUME~1\joe\Desktop>ftp {ip_address}
Connected to {ip_address}.
220 nts2 Microsoft FTP Service (Version 4.0).
User ({ip_address}:(none)): {valid_username}
Connection closed by remote host.

c:\DOCUME~1\joe\Desktop>

So all attempts to connect just fail without any password prompt.  If I look at the FTP connection list on the server it shows this as being connected.  (But obviously it's not.)  I have no filters or other security settings in effect (that I know of).

Ideas?
0
Comment
Question by:jhance
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
12 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 6894016
I hope you have already done all the basic stuff.

1) Reboot server

2) Checked all event logs

3) reapply sp6a and any other relevant patches.

4) Check that this is not a virus of some kind.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar and blocked the response for FTP ?

I hope this helps !
0
 
LVL 32

Author Comment

by:jhance
ID: 6894242
1) Reboot server

Yes.

2) Checked all event logs


Here is what I get...

In the LOG file:

Y.Y.Y.Y, -, 3/25/02, 10:48:05, MSFTPSVC1, NTS2, 0.0.0.0, 14790427, 0, 0, 426, 10054, [32]closed, -, -,

In the event log:

User {username} at host x.x.x.x has timed-out after 900 seconds of inactivity.

3) reapply sp6a and any other relevant patches.

SP6A re-installed.

4) Check that this is not a virus of some kind.

Norton Anti scan runs clean.

5) Check the FTP logs,  Isn't there an option to provide more debugging info details ?

Hmmm, not sure where that is.

6) Make sure that all the correct ports are open. Maybe someone has been changing the firewall or similar
and blocked the response for FTP ?

No firewall involved here and the router is wide open.  Another host on the same subnet (Linux) has no trouble with FTP from the same client.  So whatever is wrong it's specific to the NT box.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6895745
Joe,

Usually when multiple passive connections are made at the same time to a single FTP server it's possible to use up all available system threads for servicing clients. Any additional connection requests will result in the error you note until a client thread is available again. Is there a chance that the server is receiving multiple hits because of the open router, let's say from spammers or maybe cruising hackers?

Den
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 32

Author Comment

by:jhance
ID: 6896347
Dennis,

Thanks for the comment.  I don't think that is the issue since there doesn't seem to be any log file evidence of a large number of such hits.  Of course there are the usual "noise level" amount of these but nothing out of the ordinary.

I'll try closing the router temporarily, rebooting, and testing from the local subnet just to be sure.
0
 
LVL 32

Author Comment

by:jhance
ID: 6896354
BTW, what is a good way to:

1) Detect that such a thing is going on?
2) Put a stop to it if it is?

This machine needs to be exposed on the internet and is used as a semi-public FTP server.
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 6898428
What are you using to handle FTP, IIS? If yes, which version?

0
 
LVL 32

Author Comment

by:jhance
ID: 6898836
This is NT4/SP6 with IIS4.0.

I tried closing the router, rebooting the system, no change in behavior.

I ran NETSTAT and didn't find any out-of-the-ordinary connections in either type or quantity.

I never have trouble FTPing to the machine from itself.
0
 
LVL 25

Accepted Solution

by:
dew_associates earned 800 total points
ID: 6899521
0
 
LVL 1

Expert Comment

by:amoisant
ID: 6904019
try to telnet to the machine on port 21 like so telnet ftp.mycompany.com 21

If you don't get rejected you know the firewall or filters are allowing FTP>
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012705
Thanks JH
0
 
LVL 25

Expert Comment

by:dew_associates
ID: 7012709
Joe, sorry for not responding appropriately, is this resolved?
0
 
LVL 32

Author Comment

by:jhance
ID: 7012715
I tried a number of things including your suggestion and somewhere along the way, the problem was resolved.  I think your patch had a positive effect.

Thanks.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question