Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

FTP LIST command returns 425 error: "Unable to build data connection: Network is unreachable"

Posted on 2004-08-23
15
Medium Priority
?
1,509 Views
Last Modified: 2013-11-29
Hi!

My hosting provider does not allow Passive FTP, and I've been connecting using Active/Port well.

However, the last times I tried to connect to the server, it connects successfully, but whenever there is a LIST command, the server returns error 425 "Unable to build data connection: Network is unreachable"

I've tried disabling the firewall but the results were the same.

I contacted my provider and was told that nothing had changed in the server and that they, with an outside connection, were able to connect successfully.

I've tried using the browser, command-line FTP and several FTP clients without success.

I googled for this and found someone saying to turn on passive mode, but my server doesn't allow it.

What can I do?
0
Comment
Question by:b_loco
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
15 Comments
 
LVL 36

Accepted Solution

by:
grblades earned 600 total points
ID: 11870887
Hi b_loco,
Where are you testing the connection from?

Normally when you connect via active mode the ftp client tells the server its IP address and port it is listening on for the data connection.
The problem can occur if you are behind a dumb firewall. Your client may be saying it's IP address is 192.168.1.2 for example and the firewall at the client end does not alter this so the server replies with the error since it knows that IP address is not valid over the Internet.
0
 
LVL 2

Author Comment

by:b_loco
ID: 11871115
I've tried disabling my firewall with the same result.

Can my ISP be causing that kind of behavior at another connection point?
My provider told me that with their ISP connection (not the same as the server) they were able to work nicely.
0
 
LVL 36

Expert Comment

by:grblades
ID: 11871304
What is your IP address?
Are you using a private addressing scheme?

Once we know this then we can diagnose the problem furthur.
0
Simplify Your Workload with One Tool

How do you combat today’s intelligent hacker while managing multiple domains and platforms? By simplifying your workload with one tool. With Lunarpages hosting through Plesk Onyx, you can:

Automate SSL generation and installation with two clicks
Experience total server control

 
LVL 2

Author Comment

by:b_loco
ID: 11871567
I'm not an expert in networking so I don't really follow your question...

I've got my local network address 192.168.something.something
And I've got an "outside" address 62.48.something.something;

The router handles local IP address distribution
0
 
LVL 36

Expert Comment

by:grblades
ID: 11871674
OK so if your router is not converting the ftp command as it passes through then it will be the cause of the problem.
What router do you have?
0
 
LVL 2

Author Comment

by:b_loco
ID: 11872139
Zixel prestige 600
0
 
LVL 36

Expert Comment

by:grblades
ID: 11873221
That make of router is quite good so it should work.

Can you turn on diagnostics on the ftp server so you can see all the commands and responses coming in. That would help greatly.
0
 
LVL 2

Author Comment

by:b_loco
ID: 11893220
Connecting to www.mydomain.com on port 21. Attempt 1 of 3...

220 ProFTPD FTP Server ready.
USER myusername
331 Password required for myusername
PASS *********
230 User myusername logged in.
Server Type: UNIX (standard)
PWD
257 "/home/myusername" is current directory.
TYPE A
200 Type set to A.
PORT 192,168,0,5,6,254
200 PORT command successfull
LIST
425 Unable to build data connection: Network is unreachable
Unable to open data socket
CWD  /home/myusername/mainwebsite_html
250 CWD command successfull
PWD
257 "var/www/html" is current directory
PORT 192,168,0,5,6,255
200 PORT command successfull
LIST
425 Unable to build data connection: Network is unreachable
Unable to open data socket

... and so on

sorry about my late reply
0
 
LVL 2

Author Comment

by:b_loco
ID: 11893267
Increased points
0
 
LVL 36

Expert Comment

by:grblades
ID: 11893416
> PORT 192,168,0,5,6,254
This is the problem. The server is being told to connect back to 192.168.0.5 port 1790 (6*256+254) which is not a valid internet address.
Your Zixel router is not handling the ftp connections inteligently. Can you check the settings in the web interface for anything related to ftp.
0
 
LVL 2

Author Comment

by:b_loco
ID: 11893807
I'm sorry, I misunderstood your request.

What I posted was the log at the client

I'll try to get the server log
0
 
LVL 2

Author Comment

by:b_loco
ID: 11894190
Mon Aug  9 23:21:08 2004 0 81.193.###.### 0 /var/www/html/y/index.html a _ d r username ftp 1 * c
Mon Aug  9 23:21:08 2004 0 81.193.###.### 0 /var/www/html/y/level100_a.swf a _ d r username ftp 1 * c
Mon Aug  9 23:21:16 2004 0 81.193.###.### 835 /var/www/html/y/index.html a _ i r username ftp 1 * c
Mon Aug  9 23:21:23 2004 2 81.193.###.### 27903 /var/www/html/y/level100.swf b _ i r username ftp 1 * c

My provider gave me this logs, but I am not sure if they refer to my attempts. However, if they do, my ipaddress is "normal" and it resembles the one I have today (only last field changes)

Now I upload my files through a very user-unfriendly web interface and don't know if this refers to that activity (don't really know how to read them)
0
 
LVL 36

Expert Comment

by:grblades
ID: 11895917
Those logs are not really detailed enough as they only list the files transferred and the IP address which made the request. Full logging (often called debug logging) needs to be turned on so you can see every command and response given for all connections.
0
 
LVL 36

Expert Comment

by:grblades
ID: 12575801
The author did not respond with the additional logs requested so I could not diagnose furthur. I recomend delete/no refund.
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Make the most of your online learning experience.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

598 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question