Solved

Proftpd question - passive ftp

Posted on 2004-04-27
1
872 Views
Last Modified: 2012-06-21
My server is now using proftpd and i want my ftp server to suport both active and passive ftp mode.
I have add the directive (PassivePorts 51000 60000
) and open inbound ports 51000-60000 at the firewall.

When i try to use WS_FTP LE to connect my ftp server, i got the following error

331 Password required for user.
PASS (hidden)
230 User vip logged in.
PWD
257 "/" is current directory.
SYST
215 UNIX Type: L8
Host type (S): UNIX (standard)
PASV
227 Entering Passive Mode (203,191,246,61,156,86).
connecting to 203.191.246.61:40022
- -
connecting to 203.191.246.61:40022
! Connection failed 202.181.246.61 - connection refused
! connect: error 0
PORT 203,211,39,22,5,4
200 PORT command successful
LIST
! Receive error: Blocking call cancelled

PS. I am using port 8021 instead of port 21 for the ftp service
0
Comment
Question by:tyknight
1 Comment
 
LVL 40

Accepted Solution

by:
jlevie earned 50 total points
ID: 10935176
The problem here is that the WS_FTP LE client tried to use an ephemeral port outside of the range that your FTP server and firewall are configured for as shown in "connecting to 203.191.246.61:40022". The client tried to open the connection on 40022.

Since the RFC behavior of the server in PASV mode is to open an ephemeral port and send that port number to the client so that it can open a connection to the server using that port it sounds to me like your ProFTP configuration isn't doing what you think it is in limiting the ephemeral port range. I'd suggest reviewing your ProFTP configuration and trying the server in debug mode to see what's happening with (proftpd -n -d 5). The debug level can be adjusted, see 'man proftpd'.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Daily system administration tasks often require administrators to connect remote systems. But allowing these remote systems to accept passwords makes these systems vulnerable to the risk of brute-force password guessing attacks. Furthermore there ar…
Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now