|
| | | Forum Newbie
Group: Forum Members
Last Login: 5/8/2008 2:17:50 PM
Posts: 1, Visits: 12 |
| Hi,
I have a server, Version 6.1, that has SSH, SSL, and plain FTP running. Every time a client tries to log into the regular FTP, they receive the following errors when pasv support is enabled on the client.
I have configured the firewall set up on the server which dictates the pasv ports. I have had these ports opened on the network firewall as well.
Any ideas?
Thanks,
Connecting to X.Y.Z.180:21
Connected to X.Y.Z.180:21 in 0.000000 seconds, Waiting for Server Response
220 Server-Name X2 WS_FTP Server 6.1(21406250)
Host type (1): WS_FTP Server
XAUT 2 SSL-hash-number
230 User logged in
Host type (I): WS_FTP Server
PWD
257 "/users/user-name" is current directory
TYPE A200 Transfer mode set to ASCII
PASV
Error reading response from server.
It appears that the connection is dead. Attempting reconnect...
Connecting to X.Y.Z.180:21
Connected to X.Y.Z.180:21 in 0.000000 seconds, Waiting for Server Response
220 Server-Name X2 WS_FTP Server 6.1(63437500)
Host type (1): WS_FTP Server
XAUT 2 SSL-hash-number
230 User logged in
Host type (I): WS_FTP Server
PWD
257 "/users/user-name" is current directory
New connection OK. Reissuing command.
TYPE A
200 Transfer mode set to ASCII
PASV
Error reading response from server.
QUIT
Error reading response from server.
Failed receiving response from server
Dead connections are not restarted For "QUIT" commands.
Connection closed. Ready for next connection.
|
| |
| | | Forum Newbie
Group: Forum Members
Last Login: 5/9/2008 11:49:53 AM
Posts: 6, Visits: 15 |
| | That looks almost like the client does not have the correct port range opened on their side in their firewall or network equipment. Did they allow the corrects inbound for your FTP server external IP address? |
| |
| | | Forum Newbie
Group: Forum Members
Last Login: 5/27/2008 6:17:57 PM
Posts: 1, Visits: 2 |
| | I am having a similar issue - from the box itself. I have tried 3 clients, IE, Filezilla and WSFTP Home. WS Home appears to be able to connect to WS Server, but the other two will not connect in Passive mode (only active.) As much as most people will respond with "tell people to use WS", this is client facing FTP server and I do not have the option to demand they change their client. I need help resolving this so it works with more than just WSFTP. This is running on a 2K3 Server (all latest SP,) with WSFTP Server 6.0, no software firewall - again, local so no hw firewall being utilized for this test. Below is a log from Filezilla: Status: Connecting to 10.30.0.3:21...
Status: Connection established, waiting for welcome message...
Response: 220-ftp.alllanguages.com V2 WS_FTP Server 6.0(54062500)
Response: Welcome to All Languages FTP
Response: 220 servername... V2 WS_FTP Server 6.0(54062500)
Command: USER administrator
Response: 331 Enter password
Command: PASS ***********
Response: 230 User logged in
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/Administrator" is current directory
Command: TYPE I
Response: 200 Transfer mode set to BINARY
Command: PASV
Response: 227 Entering Passive Mode (127,0,0,1,21,125). <-- IP Masked, was public space address
Command: LIST
Error: Connection timed out
Error: Failed to retrieve directory listing
From other computers it goes about the same until the last 4 lines where I do not get a response for PASV. If anyone has seen this issue before and has any suggestions I would greatly appreciate it.
|
| |
| | | Forum Newbie
Group: Forum Members
Last Login: 7/21/2008 12:13:47 PM
Posts: 1, Visits: 2 |
| I was able to finally get IE 7.0 to work in PASV Mode in WS_FTP Server version 6.1.1.
After several calls to tech support to no avail.... Here is what you need to do.....1. Open ports on the firewall range 5501-5550 2. In the WS_FTP admin make sure the default domain settings under "firewall settings" has the port range set to 5501-5550 with no IP address. 3. Check each host that you want to access the FTP with IE or any other PASV connection make sure they have ports 5501-5550 opened as well with no IP address...I found that the global settings do not always carry over to each host. 4. When you access the FTP site with a browser you must have in your URL string the exact location of where the user folder is set up..... ftp://yourdomain.com/userfolder or in the case of the root....ftp://yourdomain.com. I hope this may help someone else after fighting this for 2 weeks after a server move. One more thing....I added listening on ports 5501-5550 as well ...I am not sure if this did anything because I only added one domain to the list...and and all the domains I've tried are working.
Blessings! |
| |
| | | Forum Newbie
Group: Forum Members
Last Login: 9/17/2008 4:40:40 PM
Posts: 3, Visits: 7 |
| | just TCP for the firewall range 5501-5550 ? |
| |
| | | 
Time Traveler
Group: Forum Administrators
Last Login: 1/2/2009 5:04:15 PM
Posts: 190, Visits: 433 |
| Yes, they are TCP ports. You can use anything in the range of 1024-5000. Also, verify that the hardware firewall is not doing any command filtering (Causing issues with the PASV command) and if the local windows firewall is running, you will need to make exceptions for these ports.
Travis G. Ipswitch, Inc. |
| |
|
|