• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Grr ... FTP serving from behind firewall (UPDATE!)

M

MercenaryForHire

Lifer
Every single frickin' time I try to host something for ATOT, my FTP times out to them.

Some people can connect just fine. I've got the ports forwarded from the router, and those who can connect get right in, passive or active.

My FTP

So far, Active FTP seems to be the ticket. Try it out, post if you can/can't get in with your config! 😀

- M4H
 
I can't get in either.

You have port 21 forwarded from router to your FTP server's internal IP, right? Right.

But do you have your FTP program listening on port 21?
 
Originally posted by: MichaelD
I can't get in either.

You have port 21 forwarded from router to your FTP server's internal IP, right? Right.

But do you have your FTP program listening on port 21?
Click to expand...

Actually, both on 666 to avoid the masses of "s|<r1pt k1dd13s" who portscan entire netblocks on port 21. Also have passive mode ports set and forwarded.

- M4H
 
Originally posted by: MercenaryForHire
Originally posted by: MichaelD
I can't get in either.

You have port 21 forwarded from router to your FTP server's internal IP, right? Right.

But do you have your FTP program listening on port 21?
Click to expand...

Actually, both on 666 to avoid the masses of "s|<r1pt k1dd13s" who portscan entire netblocks on port 21. Also have passive mode ports set and forwarded.

- M4H
Click to expand...

I get tons of scan across ports 20-21. My FTP proggy just won't let you in w/o a password. 🙂 My router's filters block everything else except IMCP ping. I leave that turned on for various reasons. Also, all my FTP stuff is on a single, separate HD. The other HDs in the box do not have sharing turned on...I feel relatively safe.
 
I'll bet the people having trouble are behind NAT and the ones who don't have problems, aren't. Are you sure people can connect to you in passive mode? In passive mode the ftp server has the clients reconnect to a higher numbered port. So for people to be connecting in passive mode you also will need a range of ports open in addition to 20/21.

So assuming its not and people are only successfully connecting in active mode, another problem comes into play. Now the client is telling the ftp server to connect back to it at a certain port number on the client. But because of the NAT setup the client is behind they never get that connection.

So anyway without some creative firewall rules running a ftp server behind nat and connecting with a client behind nat can be difficult. FTP is old and should die, use something else. 😉 😀
 
System with a Router ( I mapped port 600-800).

Clicked on your ftp link, get a message that can not connect to server.

Clicked on MichaelD ftp link (second post), get is password screen.

Start first with normal setting i.e. port 21. Make it working, than play with ports.
 
Originally posted by: MercenaryForHire
/me set FTP to port 21, link updated. Passive port range set and forwarded to my box.

Still nothing.

- M4H
Click to expand...


OK, an improvement; I hit your site...get it in my address bar, but I get an error message saying "You don't have permission to access this folder."

Let's try this; get rid of that funky looking login and enable anoymous login just for now, until we fix it. Then you can get specific logins working.
 
I've always had this problem, and have never been able to get it to work. As mentioned above, it occurs when both client and server are behind NAT devices. I've heard of mythical people getting it to work, but I have no idea how. As far as just randomly choosing ftp port #, I've tried about 400 different ranges and never gotten it to work.

Hope you find a solution-
 
Some of the Entry Level Cable/DSL Routers do not support FTP running on non-standard ports.

This means that if you want every one to connect you have to configure FTP to standard settings.

If they do not see the folders. The browser (Internet Explorer) they have to be unchecking from passive mode, and check Enable Folder View for FTP.
 
Originally posted by: MercenaryForHire
Give it another shot. Anonymous logins are on. 🙂

- M4H
Click to expand...


BAH!!! I forgot they block FTP here at work. It LOOKS like it works though. I get the "searching for folders" flashlight icon...same thing I get when I try to hit my FTP from work. I'll check it when I get home in about two hours or so. 🙂 I'll let you know.
 
Originally posted by: MichaelD
Originally posted by: MercenaryForHire
Give it another shot. Anonymous logins are on. 🙂

- M4H
Click to expand...


BAH!!! I forgot they block FTP here at work. It LOOKS like it works though. I get the "searching for folders" flashlight icon...same thing I get when I try to hit my FTP from work. I'll check it when I get home in about two hours or so. 🙂 I'll let you know.
Click to expand...

Cool. I'll keep it running. 🙂

- M4H
 
I got in and left you a happy little song. 🙂

Now you just have to get the logins straight. What FTP proggy are you using?
 
Originally posted by: MercenaryForHire
Originally posted by: MichaelD
I got in and left you a happy little song. 🙂
Click to expand...

😀

So that makes me what, 1 for 10 with the FTP clients? 🙂
Are you NAT/firewalled/PASV?

- M4H
Click to expand...

All of the above. I use GuildFTP, running passive mode with my real IP in there and the port range set from 20 to 65000. HOW it actually works, I dunno. My router only forwards 20 and 21.
 
I gave it a try.

With Passive mode check it does not work.

With passive mode Uncheck, I can see a yu0 text.
 
Hmm. That's interesting...I just go in thru IE. I guess IE doesn't use passive mode? (not real smart on this...can you tell?)
 
There's a checkbox in the Internet Settings control panel applet to "turn on 'Use Passive Mode for FTP'" ... not sure whether it's on or off by default.

I guess Active FTP seems to be the trick here. 😛

- M4H
 
Originally posted by: MercenaryForHire
There's a checkbox in the Internet Settings control panel applet to "turn on 'Use Passive Mode for FTP'" ... not sure whether it's on or off by default.

I guess Active FTP seems to be the trick here. 😛

- M4H
Click to expand...

Ah, I see it. Thanks.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top