Solved

Proftpd question - passive ftp

Posted on 2004-04-27
1
878 Views
Last Modified: 2012-06-21
My server is now using proftpd and i want my ftp server to suport both active and passive ftp mode.
I have add the directive (PassivePorts 51000 60000
) and open inbound ports 51000-60000 at the firewall.

When i try to use WS_FTP LE to connect my ftp server, i got the following error

331 Password required for user.
PASS (hidden)
230 User vip logged in.
PWD
257 "/" is current directory.
SYST
215 UNIX Type: L8
Host type (S): UNIX (standard)
PASV
227 Entering Passive Mode (203,191,246,61,156,86).
connecting to 203.191.246.61:40022
- -
connecting to 203.191.246.61:40022
! Connection failed 202.181.246.61 - connection refused
! connect: error 0
PORT 203,211,39,22,5,4
200 PORT command successful
LIST
! Receive error: Blocking call cancelled

PS. I am using port 8021 instead of port 21 for the ftp service
0
Comment
Question by:tyknight
1 Comment
 
LVL 40

Accepted Solution

by:
jlevie earned 50 total points
ID: 10935176
The problem here is that the WS_FTP LE client tried to use an ephemeral port outside of the range that your FTP server and firewall are configured for as shown in "connecting to 203.191.246.61:40022". The client tried to open the connection on 40022.

Since the RFC behavior of the server in PASV mode is to open an ephemeral port and send that port number to the client so that it can open a connection to the server using that port it sounds to me like your ProFTP configuration isn't doing what you think it is in limiting the ephemeral port range. I'd suggest reviewing your ProFTP configuration and trying the server in debug mode to see what's happening with (proftpd -n -d 5). The debug level can be adjusted, see 'man proftpd'.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Daily system administration tasks often require administrators to connect remote systems. But allowing these remote systems to accept passwords makes these systems vulnerable to the risk of brute-force password guessing attacks. Furthermore there ar…
Fine Tune your automatic Updates for Ubuntu / Debian
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now