Can't get response from FTP server

bobflanagan

2011-02-27 18:40:34

Hello,

I have recently setup a new FTP site on a Windows 2008 Server. The server has IIS 7.5. As you may know, FTP capabilites have changed in this version and subsequently I am having problems connecting to this new FTP site. The setup on the server is simple and I basically used the defaults to setup including 'Allow SSL'. However, when I attempt to connect to the FTP server using SmartFTP Client I get the following messages:

[13:36:15] SmartFTP v4.0.1140.0
[13:36:15] Resolving host name "74.208.193.229"
[13:36:15] Connecting to 74.208.193.229 Port: 21
[13:36:15] Connected to 74.208.193.229.
[13:36:15] 220 Microsoft FTP Service
[13:36:15] AUTH TLS
[13:36:15] 234 AUTH command ok. Expecting TLS Negotiation.
[13:36:15] TLS 1.0 encrypted session established.
[13:36:15] Key Exchange: 2048 bit RSA
[13:36:15] Session Cipher: 128 bit AES
[13:36:15] Command channel protection set to Private.
[13:36:15] PBSZ 0
[13:36:15] 200 PBSZ command successful.
[13:36:15] USER administrator
[13:36:15] 331 Password required for administrator.
[13:36:15] PASS (hidden)
[13:36:15] 230 User logged in.
[13:36:15] SYST
[13:36:15] 215 Windows_NT
[13:36:15] Detected Server Type: Windows NT
[13:36:15] RTT: 71.260 ms
[13:36:15] FEAT
[13:36:15] 211-Extended features supported:
[13:36:15] LANG EN*
[13:36:15] UTF8
[13:36:15] AUTH TLS;TLS-C;SSL;TLS-P;
[13:36:15] PBSZ
[13:36:15] PROT C;P;
[13:36:15] CCC
[13:36:15] HOST
[13:36:15] SIZE
[13:36:15] MDTM
[13:36:15] REST STREAM
[13:36:15] 211 END
[13:36:15] OPTS UTF8 ON
[13:36:15] 200 OPTS UTF8 command successful - UTF8 encoding now ON.
[13:36:15] Detected Server Software: Microsoft IIS FTP Service
[13:36:15] PWD
[13:36:15] 257 "/" is current directory.
[13:36:16] TYPE A
[13:36:16] 200 Type set to A.
[13:36:16] PROT P
[13:36:16] 200 PROT command successful.
[13:36:16] PASV
[13:36:16] 227 Entering Passive Mode (74,208,193,229,192,64).
[13:36:16] Opening data connection to 74.208.193.229 Port: 49216
[13:36:16] LIST -aL
[13:36:16] 150 Opening ASCII mode data connection.
[13:36:37] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
[13:36:53] 550 Data channel timed out.

So you can see I am logging in successfully but the server is not responding. Now I noticed on the line that says 'Opening data connection' that port 49216 is displayed. Not sure where this port is coming from as I am using port 21. Can anyone see what might be the problem here?

TIA

2011-02-28 06:47:32

It is most likely a firewall problem on the server side. Meaning the firewall on the server blocks the incoming connection from SmartFTP.

bobflanagan

2011-02-28 14:01:12

The server is a hosted server at a third party provider (1&1). Are you suggesting that configuration changes are needed on Windows Firewall? If so, do you know what particular settings need to be changed?

It is most likely a firewall problem on the server side. Meaning the firewall on the server blocks the incoming connection from SmartFTP.

2011-02-28 14:48:11

- The passive port range needs to be set in the IIS's FTP server: http://blogs.msdn.com/b/vijaysk/archive ... s-5-0.aspx
- Open this port range (incoming TCP) in the firewall on the server

weisborg

2011-03-01 21:41:10

...
[13:36:16] PASV
[13:36:16] 227 Entering Passive Mode (74,208,193,229,192,64).
[13:36:16] Opening data connection to 74.208.193.229 Port: 49216
[13:36:16] LIST -aL
[13:36:16] 150 Opening ASCII mode data connection.
[13:36:37] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
[13:36:53] 550 Data channel timed out.

So you can see I am logging in successfully but the server is not responding. Now I noticed on the line that says 'Opening data connection' that port 49216 is displayed. Not sure where this port is coming from as I am using port 21. Can anyone see what might be the problem here?

TIA

You'd have to read up on Active vs Passive FTP and RAW FTP commands to know all the details, but:
In selecting Passive Mode you were sent back 74,208,193,229,192,64 by the server, so with the first 4 being IP the 192 * 256 + 64= 49216. This tells SmartFTP the port the server wishes to be connected back on for the data channel. Is your host dedicated or shared?

1&1 appears to be just is specific as most others on what is supported, but from what I've seen lately the shared hosting all seem to only support Active even though their FTP Server responds like it supports Passive (FTP/IIS returns a port to connect back on for data, but the ports are blocked). If you have no way of getting at the Port and Firewall settings on the server/host as suggested you may have to go Active Mode on your connection type. This may require more work on your side though for Router and Firewall configuration since it will be an incoming connection to you from the server. If your router and firewall are good (And nothing is weird like FTP Command and Data ports being on different IPs) you will only have to set the OS/software firewall to allow incoming for SmartFTP then everything should be seen as valid traffic once a connection to the FTP server is made. I had an old router though last year that needed port ranges forwarded then I set a port range in SmartFTP to use as well since in Active mode SmartFTP sends a string similar to the 74,208,193,229,192,64 above telling the server the ports to connect back on.