Solved

Microsoft FTP7 Server configuration - just can't get it to work

Posted on 2013-12-17
6
276 Views
Last Modified: 2014-07-02
I am trying to get a FTP site configured for the sole purpose of backing up cPanel accounts on my domain's fileserver/nas.

I installed IIS and FTP7 on a spare 2008R2 server we have in the office, and performed what I thought was a pretty basic configuration. My current problem is that I cannot get the FTP site to properly use my chosen folder location, located on a shared drive that is actually our NAS. If I have it configured to point to that folder, I get the message "530 User cannot log in, home directory inaccessible."

At first I tried giving full access/owner ship to the user I created for doing backups, then I tried connecting as my domain admin and reverted permissions to administrators, same message every time. I even mimicked the permissions on the default ftp root folder (SYSTEM as owner, then I just gave "everyone" full access)

But if I configure it to use the default FTP folder,  c:\inetpub\ftproot, I can connect to the server but it still doesnt work. I get the following happen:
Status:	Resolving address of ***.****.com
Status:	Connecting to 50.**.**.73:****...
Status:	Connection established, waiting for welcome message...
Response:	220 Microsoft FTP Service
Command:	USER **backupuser**
Response:	331 Password required for **backupuser**.
Command:	PASS *********
Response:	230 User logged in.
Command:	OPTS UTF8 ON
Response:	200 OPTS UTF8 command successful - UTF8 encoding now ON.
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is current directory.
Command:	TYPE I
Response:	200 Type set to I.
Command:	PASV
Response:	227 Entering Passive Mode (50,**,**,73,229,0).
Command:	LIST
Response:	150 Opening BINARY mode data connection.
(5 second pause)
Error:	Connection timed out
Error:	Failed to retrieve directory listing

Open in new window


I have set my data port range to 56000-56500 and forwarded those through my network firewall and windows firewall, as well as my ftp port (not standard)

Once I get the FTP Server working *at all* I want to get it configured to use my NAS for storage since this will be for storing backup snapshots and I want plenty of space available.

I want to add also that I was monitoring through Process Monitor and found no real issues, and also my Ftp logs show nothing of note
0
Comment
Question by:ntobin
6 Comments
 
LVL 38

Expert Comment

by:Aaron Tomosky
Comment Utility
A little off topic but since no one has answered yet: have you looked at FileZilla FTP server? It's ridiculously easy to setup. I use it on all my remote sites to do stuff just like you are trying to do.
0
 
LVL 22

Expert Comment

by:rickhobbs
Comment Utility
Start by upgrading to FTP 7.5.  To be honest, though, I also use FileZilla FTP server.  It is free and easy.
0
 
LVL 16

Expert Comment

by:AlexPace
Comment Utility
The log shows this:

227 Entering Passive Mode (50,**,**,73,229,0)

That means the FTP client thinks that it should make an outbound connection to port 58624 on IP address 50.*.*.73 but it can't establish the connection.

So maybe the problem is that the client's firewall does not allow it and maybe the problem is the server's firewall is configured to allow inbound connections on range 56000-56500 but the server is expecting the connection on 58624.

To calculate the port number look at the 5th and 6th number in the PASV response.  Multiply the 5th number by 256 and then add the value of the 6th number so in your case:
(229 * 256) + 0 = 58624.  Note: The first 4 numbers of the PASV response are the IP address where the client is supposed to connect.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 1

Author Comment

by:ntobin
Comment Utility
I am on 7.5 I think, I didn't realize at first.

I would love to use Filezilla but for some reason the stupid sourceforge installer wont run on that machine, it cannot detect an internet connection... completely asinine. No other mirror I can find for an installer, either.

I've given up on IIS FTP though. What a crock.
0
 
LVL 38

Accepted Solution

by:
Aaron Tomosky earned 500 total points
Comment Utility
0
 
LVL 22

Expert Comment

by:rickhobbs
Comment Utility
The link aarontomosky supplied is the actual program.  No installer required.
0

Featured Post

Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now