Some users can't get on my FTP, using war.

[ander]

I'm running WAR Ftp v. 1.66x4.
My ISP is @home (which recently capped me at 15 up...)
I'm running an SMC Barricade to share my connect to another computer.
Most users can connect to my FTP without any problems, but some people just can't seem to get through. Some problem with PASV mode and errors with the sendlist commands.
Here's a quote I took off a person that had trouble logging in:


Connecting to 24.11.***.*** port **
Connected, waiting for response...
220- ander's FTP site WAR-FTPD 1.66x4 Ready
220 Please enter your user name.
USER ****
331 User name okay, Need password.
PASS (not shown)
230 User logged in, proceed.
CWD /
250 "/" is current directory.
pwd
257 "/" is current directory.
TYPE A
200 Type is ASCII (No subclass parameter defined, Non-Print used as default.)
PORT 192,168,**,**,*,***
200 Port command okay.
LIST
150 Opening ASCII NO-PRINT mode data connection for ls -l.

 

[Need4Speed]

Yup this is a common problem of ftp behind routers and gets worse when the clients are behind routers too.
1. what port are you running?
2. is the server in passive mode?
3. if the server is passive, is there a place to enter the PASSv IP and did you do so?
4. Did you open all the ports required for PASSV mode on the router? it rquires more than just the standard control port. Data ports are assigned dynamically above 1024...a range needs to be set and opened.

One of the easier ways around this is to run in PORT on a standard port 21...most everyone should be able to log in then. you. Also, you may want to look into G6 (bulletproof) ftp. it has settings for passive and you can also set the passive port range.

if you are interested in the technical aspects behind this i would gladly share tehm with you....

 

[ander]

Please explain some more.
I've had users play around with PASV mode, but without any luck. I havn't changed my port, but I have cleared the particular port number I'm using through my router.

Some people can get on without any problems, but some can't.

 

[JackMDS]

The people who can not get your server, probably have a Router, and or software Firewall.

They have to open the same ports that you are using on their computer.

 

[ander]

Ahh, never thought of that! Good point. Other than 21, are there default ports that are open on all routers/firewalls?

 

[n0cmonkey]

Routers should not leave ANY ports open by default. Oh wait, they arent FIREWALLS they just do basic packet filtering... for FTP you will need 20+21 and possibly some high ports. Just make everyone use PASV and you should be fine.

 

[ander]

I've tried my best to make this thing work. Even called up SMC tech support. They just had me reset the router and update the firmware. Neither of which helped.

I've tried having users play w/ pasv and non-pasv mode...nothing seems to work.