Link to home
Start Free TrialLog in
Avatar of bisonfur37
bisonfur37

asked on

firefox and linux ftp cannot connect to vsftpd server. It seems that vsftpd changes ports every time.

I have found out that FTP can turn out to be a major pain and although I have found many postings regarding this subject, I have yet to find a clear answer.  That is why I am giving this question a bunch of points.  The issue can be summed up as follows:
1. unix ftp client has problem with vsftpd server
2. firefox(regardless of windows or linux) has problems with vsftpd server
3. IE has no problems with vsftpd server
4. IE has problems with vsftpd server only when it is routed through a linux machine acting as router/firewall/NAT

Below are the specifics to this problem.  I tried adding pasv_promiscuous=YES to vsftpd along with other settings but I still cannot connect using firefox or linux, besides, it works on IE. I believe the problem to be that every time I connect to the ftp server it seems to connect to a different port.  All of my linux machines are running a firewall so they are probably blocking the traffic although they are able to log in.
Every time I connect to vsftpd I get the line "(192,168,123,177,164,56)" with the last two numbers always changing.  Is there a way to have vsftpd connect on the same port every time?  What about the connect_from_port_20=YES option?  Any suggestions?

Network layout:

                                                 | Firewall PC (linux) ->     | Win2K pc
                                                 | Dell(XP)
Verizon DSL modem -> router ->      | ftp server (linux)
                                                 | HP(XP)
                                                 | wireless (router) ->      | fujitsu(XP)
                                                                               | dell(XP)

Firewall PC (acts as router with firewall and NAT)
  linux ftp:
    230 Login successful. Have fun.
    Remote system type is UNIX.
    Using binary mode to transfer files.
    ftp> passive
    Passive mode off.
    ftp> ls
    200 PORT command successful. Consider using PASV.
    425 Failed to establish connection.
  firefox
    425 failed to establish connection

Win2K pc (through Firewall PC)
  IE:
    200 switching to ASCII mode
    500 illegal PORT command
    500 unknown command
  dos ftp
    500 Illegal PORT command
    425 Use PORT or PASV first.

Dell(XP)
  dos ftp
    works for uploads and downloads
  firefox
    425 failed to establish connection

HP(XP)
  IE (6.0.2800.1106xpsp2.030422-1633IC)
    works
  dos ftp
    works

dell(XP) through wireless router
  IE (6.0.2800.1106xpsp2.030422-1633IC)
    works
  dos ftp
    works

fujitsu(XP) through wireless router
  IE (6.0.2800.1106.xpclnt_qfe.021108-2107IC)
    works
  dos ftp
    works
  firefox
    425 failed to establish connection
ASKER CERTIFIED SOLUTION
Avatar of jlevie
jlevie

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bisonfur37
bisonfur37

ASKER

Good.  Thank you for the explanation.  Now I will look for a way to restrict the range of ports.  I'll close this answer soon and you definitely take most, if not all of the points.  Thank you.
I just looked at the vsftpd docs and the config directives pasv_max_port & pasv_min_port allow the restriction of the ephemeral port range, see 'man vsftpd.conf'