data connection error

[gurabli]

* FlashFXP v[ 3].[4 ], build [1145 ], [ ]registered, [x ]unregistered, [ ]pirated
* OS [x ] WinXP, [ ] Win2K, [ ] Win98, [ ] WinME, [ ] Other
* Running behind NAT/router [x ] Yes & Model [? ], [ ] No, [ ] Not sure
* Running firewall [ x] Yes, Name [Kerio ], Ver. [ 2], or [ ] No
* Running Antivirus [ x] Yes, Name [NOD32 ] or [ ] No
* Network [ ] xDSL, [ ] CABLE, [ ] Dail-Up, [x ] OtherT1

HI!

I have been using an FTP site for over a year (with Total Commander) and all worked fine. From a week ago, I can't use that site anymore. I access it from a dormetry (T1 line) and we have a firewall which of course I can't access. So I used flashfxp in passive mode and all worked fine. Than once all stopped. I could connect to the site but listing resulted in an error. I managed to overcome this by turning on STAT -L to list directory. Now I can see and browse in folders but when I try to download it fails. Here is the log.
Can I solve this problem without accessing the router/firewall? Please help me!
BTW, FlashFXP is a very nice and good program, especially after TC:)

(I can access the site and download from other places, eg from home, so the site is full-functional)

Regards: gurabli

[L] Connecting to XXX -> DNS=XXXXXXX IP=XXXXXX PORT=XXXX
[L] Connected to XXX
[L] 220 XXX (glFTPd 2.00 Linux+TLS) ready.
[L] AUTH TLS
[L] 234 Security data exchange complete.
[L] Connected. Negotiating TLSv1 session..
[L] TLSv1 negotiation successful...
[L] TLSv1 encrypted session using cipher AES256-SHA (256 bits)
[L] PBSZ 0
[L] 200 PBSZ=16384
[L] USER XXXX
[L] 331 Password required for XXXX.
[L] PASS (hidden)
[L] 230-
[L] 230- XXXX
[L] 230-
[L] 230 User XXXX logged in. ::)
[L] SYST
[L] 215 UNIX Type: L8
[L] FEAT
[L] 211- Extensions supported:
[L] AUTH TLS
[L] AUTH SSL
[L] PBSZ
[L] PROT
[L] CPSV
[L] SSCN
[L] MDTM
[L] SIZE
[L] SYST
[L] 211 END
[L] CWD /xxxx
[L] 250 CWD command successful.
[L] PWD
[L] 257 "XXXX is current directory.
[L] TYPE I
[L] 200 Type set to I.
[L] PROT C
[L] 200 Protection level accepted.
[L] PASV
[L] 227 Entering Passive Mode (195,XX,XXX,39,240,23)
[L] Opening data connection IP: 195.XX.XXX.39 PORT: 6X463
[L] Data Socket Error: Connection timed out
[L] Transfer Failed!
[L] PASV
[L] 227 Entering Passive Mode (195,XX,XXX,39,240,107)
[L] Opening data connection IP: 195.XX.XX.39 PORT: 6X547
(soft abort)
[L] ABOR
[L] 225 ABOR command successful.
[L] QUIT
[L] 221- Goodbye
[L] 221
[L] Transfer Failed!
[L] Logged off:XXX
User Aborted

[MxxCon]

find out what changed on the server since you started having problems.
in problem situations when SSL and PASV are used most of the time it's server's fault...
without SSL it's possible that client's firewall was somehow messing around with ftp commands. but once SSL is enabled, all commands are encrypted so firewall can't touch or even see them. that means that server's firewall is not properly configured to accept connections on data-range ports (in the example again it's 6X463, 6X547).....or your dorm's firewall doesn't allow outgoing connections to 6xxxx ports.

[gurabli]

afaik, nothing changed. i guess the problem would be in my dorm's firewall - maybe there were some changes.
is there any way to change the 6xxxx ports? or how to bypass them? maybe i could try to use a port that is not blocked by my dorm's firewall? or if it is blocked, there is nothing i can do? please help me on this!
thanx!
gurabli

[MxxCon]

in PASV mode server tells you what port to connect to, client has no say in that.
you could try asking server admin not to use such high port range for data connections.

also if possible, try to disable ssl(and keep pasv) and see if that will fix your issues. if it will, that means server's firewall needs to be configured properly.

[gurabli]

i have tried without ssl (but with pasv) and it is the same.
i guess i must ask the admin in the dorm to open the 6xxx ports for me or to contact the site admin to assign a different port. is there any way to check which ports are not closed? than i could ask that specific port number.

[MxxCon]

find out if other people also have problem connecting to that server in pasv mode

[gurabli]

already asked - they don't have any problem in pasv...