FTP 550 Error - Port Related? Rights are fine.

Posted on 2005-04-26
Last Modified: 2013-11-29
I have a user in another companies network. They can log into my FTP server fine. They are getting an FTP 550 error when they try a put or a get. If I log in from the internal network with the user's ID and password I am able to make a put or get. I have tried the FTP Server from Win2000 and Solaris 8, and used both IE and command line as a client. Works from inside the network, but not outside.

Could this be a port issue? I have opened port 20 and 21 in the firewall between the two companies.

Could it be a PASV issue where the FTP server is trying to use a higher port not allowed through the firewall?

Any help would be great.

Question by:p1800volvo
    LVL 4

    Accepted Solution

    Is the remote user accessing  the FTP server through a firewall at their end (i.e. they are behind a firewall)? If so, they should use PASV mode. Normal mode FTP is weird in that the client connects to the server, but then the server drops that connection and initiates a connection back to the client. Seeing as most firewalls don't like connections initiated from outside, this tends to fail. Passive mode (PASV) keeps the session as a truly client to server conversation- firewall sees the connection go out, makes a note of it in its' state table (if it's a stateful inspection FW), and all is cool.

    This may not be the solution to your problem, but PASV is always recommended when passing through a firewall.
    LVL 1

    Author Comment

    If I had to bet it is a PIX firewall.

    I will try PASV. Hopefully that will work.


    Expert Comment

    Hi all,

    I got exactly the same problem with FielZilla (FTP client).
    I behind NAT and since port 21 was propely forwarded; I had the same firewall as before the NAT implementation so I thought the issue was related to NAT.

    I was constantly getting the message:

    Response:      550 Data connection must go to same host as control connection.
    Error:      Disconnected from server
    Error:      Could not retrieve directory listing
    Error:      Timeout detected!

    After reading this post, I've simply enabled the passive mode in FileZilla and ...

    Response:      150 Data connection accepted from; transfer starting.
    Response:      226 Listing completed.
    Status:      Directory listing successful


    thanks for the solution and I hopethis will help others as well...

    have a nice day

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
    Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
    Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now