Ftp Server Help

[MetDream]

Hi Guys, I'm trying to set up an FTP through my router and my firewall. The master FTP guru, sjmike was assisting me. We used these tutorials:

http://www.portforward.com/english/rout ... Serv-U.htm
and
http://www.rhinosoft.com/KnowledgeBase/ ... RefNo=1044

(we left the IP address blank)


We got it so he can connect to my server, but cannot use the PASV mode. If he disables it, he can connect and dowload etc.

We've tried a bunch of different stuff, but it is still not working correctly.

Any ideas.

[sjmike]

From what I can tell, she has serv-u correctly configured and her router is configured with the matching ports. 50010 - 50015

However PASV mode is returning the wrong ports.

Code: Select all

227 Entering Passive Mode (xx,xxx,x,xxx,200,101)
Opening data connection IP: xx.xxx.x.xxx PORT: 51301
Data Socket Error: Connection timed out
List Error
PASV mode failed, trying PORT  mode.
Listening on PORT: 1821, Waiting for connection.
PORT 192,168,1,104,7,29
200 PORT Command successful.
LIST -al
150 Opening ASCII mode data connection for /bin/ls.
226 Transfer complete.

It should be a PASV port range btetween 50010 - 50015

[MetDream]

This is what Spawn got when he tried:

Response: 230 User logged in, proceed.
Command: FEAT
Response: 211-Extension supported
Response: CLNT
Response: MDTM
Response: MDTM YYYYMMDDHHMMSS[+-TZ];filename
Response: SIZE
Response: SITE PSWD;EXEC;SET;INDEX;ZONE;CHMOD;MSG
Response: REST STREAM
Response: XCRC filename;start;end
Response: MODE Z
Response: MLST Type*;Size*;Create;Modify*;Win32.ea*;
Response: 211 End
Command: SYST
Response: 215 UNIX Type: L8
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is current directory.
Command: MODE Z
Response: 200 MODE Z ok.
Command: OPTS MODE Z LEVEL 8
Response: 200 MODE Z LEVEL set to 8.
Command: TYPE A
Response: 200 Type set to A.
Command: PASV
Response: 227 Entering Passive Mode (69,109,9,135,200,103)
Command: LIST
Error: Transfer channel can't be opened. Reason: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Error: Could not retrieve directory listing

Anyone have any ideas?

[MetDream]

I called my router support tech dudes and got sent to the Level 2 Tech because I was talking over the Level 1 Tech dude's head with all this FTP stuff I don’t even fully understand. That cracks me up!!!

Anyways. The Tech dude said to disable my software firewall because it was conflicting with the hardware firewall built into the dsl modem router. When it is disabled the FTP works perfectly with great speeds. I had been running a software fire wall I was trying out but it wouldn't configure with the router firewall to open the ports correctly. So I disabled and deleted it for now, enabled the XP Firewall and the same thing happened resulting in users being able to connect to the FTP but not able to use it in the passive mode.

So my question is having a software firewall necessary if I am using the hardware firewall built into my dsl modem/router? Especially safe enough to run a very limited accessed FTP?

If not anyone know how to make my software firewall work properly with the router? It is a 2Wire 1701HG.

[Robertbeer]

Well i have some time i don't work with a Routers, i think if you have a hardare firewall configured, you don't need a firewall software because you told the Router wich ports will be available and everything, in your case i'd use only the router firewall with a monitor software just to make sure all is Ok.

Not too much to solve your problem but i hope it helps.

Good luck,
Robert

[MetDream]

Thanks. It helps to confrim that just using the hardware firewall is enough.