error "Failed to retrieve directory listing " while connecting FTP

I'm using FTPES using port 2980.  FileZilla showing error "Failed to retrieve directory listing"

Using  IIS10

basic authentication enabled.
anonymous authentication disabled

FTP authorization rule set for a user.


netsh int ipv4 show dynamicport tcp  command shows below dynamic port range

start port 49152
number of ports: 16384


Log:

Status:      Resolving address of xx-asdfgh-01.internal.sdfg.com
Status:      Connecting to 182.xx.xx.xx:2980...
Status:      Connection established, waiting for welcome message...
Status:      Logged in
Status:      Retrieving directory listing...
Command:      PWD
Response:      257 "/" is current directory.
Command:      TYPE I
Response:      200 Type set to I.
Command:      PORT 10,56,2,41,231,204
Response:      200 PORT command successful.
Command:      LIST
Response:      150 Opening BINARY mode data connection.
Response:      550
Error:      Failed to retrieve directory listing
Varshini SAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ITSysTechSenior Systems AdministratorCommented:
Could you try this in Filezilla and try again? Where it says "host" add the site or server you want to connect to then click Connect.

1.JPG
0
Varshini SAuthor Commented:
I tried this but didn't work
0
ITSysTechSenior Systems AdministratorCommented:
Have you tried this? It is somewhat difficult to find the solution without more information of what you have tried.

1.JPG
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Varshini SAuthor Commented:
in the protocol, i have tried FTP & SFTP

FTP - Encryption tried all the options.

In the transfer settings tab i have tried active and passive options
0
Varshini SAuthor Commented:
and i tried require explicit  FTP over TLS
0
Sudeep SharmaTechnical DesignerCommented:
In IIS passive port range is defined under "Data Channel Ports", check those if those are falling under the dynamic port range of the OS.

Further how is Directory Listing is configured in IIS (windows style or Unix Style), it would be under FTP Directory Browsing?

Thanks,
Sudeep
0
Varshini SAuthor Commented:
Directory Listing is configured as  IIS -windows style.

I did not see any range under data channel port range.

Here is the output of netsh  command shows dynamic port range

netsh int ipv4 show dynamicport tcp  

start port 49152
number of ports: 16384
0
Sudeep SharmaTechnical DesignerCommented:
Command:      PORT 10,56,2,41,231,204

First 4 shows the client IP address which 10.56.2.41
Last two are the dynamic Port Range
231 in Hex is E7
204 in Hex is CC
E7CC from Hex to Decimal equals to 59340.

So is port 59340 allowed on the firewall or set on your FileZilla client?

I used the following portal to understand the FTP PORT command and converting Hex to Decimal and Decimal to Hex
https://www.securitypronews.com/understanding-the-ftp-port-command-2003-09
http://www.rapidtables.com/convert/number/hex-to-decimal.htm

Sudeep
0
Varshini SAuthor Commented:
Sudeep: I'm getting different port numbers each time

now i get the below port numbers 252,252
Command:      PORT 10,56,2,41,252,252 .

Then how do I set the port in the firewall?
0
Varshini SAuthor Commented:
Here is the screenshot for assigned the PORT 2980 in the IIS FTP configuration

iis-ftp
0
Sudeep SharmaTechnical DesignerCommented:
Please check the FTP Firewall Support in IIS.

By default it is 0-0 which means it would be random, so specify the port range which could be open on your firewall and allowed by your server.

IIS FTP option1
IIS FTP Option 2
0
Varshini SAuthor Commented:
Have a clarification ,

dynamic port range start on 49152 and ends at 65536. Should I have to open these port range in the firewall?
0
Sudeep SharmaTechnical DesignerCommented:
If it is public facing FTP, you would need to provide the public IP address of FTP server in the FTP Firewall Support.

Port range would not be required in my opinion. Have you checked the firewall logs though, if those ports are getting blocked?

Sudeep
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Varshini SAuthor Commented:
Thank you Sudeep Sharma & ITSysTech for your help. i was not able to close the question since not well.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.