• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 901
  • Last Modified:

Proftpd question - passive ftp

My server is now using proftpd and i want my ftp server to suport both active and passive ftp mode.
I have add the directive (PassivePorts 51000 60000
) and open inbound ports 51000-60000 at the firewall.

When i try to use WS_FTP LE to connect my ftp server, i got the following error

331 Password required for user.
PASS (hidden)
230 User vip logged in.
PWD
257 "/" is current directory.
SYST
215 UNIX Type: L8
Host type (S): UNIX (standard)
PASV
227 Entering Passive Mode (203,191,246,61,156,86).
connecting to 203.191.246.61:40022
- -
connecting to 203.191.246.61:40022
! Connection failed 202.181.246.61 - connection refused
! connect: error 0
PORT 203,211,39,22,5,4
200 PORT command successful
LIST
! Receive error: Blocking call cancelled

PS. I am using port 8021 instead of port 21 for the ftp service
0
tyknight
Asked:
tyknight
1 Solution
 
jlevieCommented:
The problem here is that the WS_FTP LE client tried to use an ephemeral port outside of the range that your FTP server and firewall are configured for as shown in "connecting to 203.191.246.61:40022". The client tried to open the connection on 40022.

Since the RFC behavior of the server in PASV mode is to open an ephemeral port and send that port number to the client so that it can open a connection to the server using that port it sounds to me like your ProFTP configuration isn't doing what you think it is in limiting the ephemeral port range. I'd suggest reviewing your ProFTP configuration and trying the server in debug mode to see what's happening with (proftpd -n -d 5). The debug level can be adjusted, see 'man proftpd'.
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now