DOes anyone have any way to allow fxp users to connect to your ftp without PASV?

avenger_sleek · 09-02-2002, 10:36 AM

My ftp (and many others) requires PASV to be disabled to allow directory listing. All the fxp users I know are having problems listing, even when they say they disable it. Since I cannot run fxp on my system (unix), does anyone have a solution that works?

thx in advance.

MxxCon · 09-02-2002, 03:45 PM

"fxp" and "flashfxp" mean 2 totaly differnt things. so to remove any confusion when you are talking about flashfxp, please say so.

if a user is behind a firewall, just disabling pasv will not allow them to get dir list or d/l files. there are a few different things they will need to change depending on their config...
it would be alot better if ftpd was allowing PASV connections. this way only one change will affect most/all users..instead of each user messing around w/ their router config and firewall settings.

avenger_sleek · 09-02-2002, 04:52 PM

Well I originally meant that users that tried to connect to my ftp were using the flashXP client, and that disabling PASV on their end did not allow them to list on my ftp. I know some people use cuteFTP, for instance, and they can connect to my ftp server just fine.

As for my setup, i have over 150 users in my database, and switching would create a lot of problems. Unfortunately, it has to be hosted on the win32 platform so that limits the tweaking I can do.

I run gene6 ftp server, by the way.

Thanks for you reply

MxxCon · 09-02-2002, 05:21 PM

well, what do you think would be easier to do? tell "over 150 users" to mess with their connections or configure one ftpd to allow both PORT and PASV connections?

and besides, there is no "switching" that "would create a lot of problems", you just have to properly configure your system to allow both types of connections. users who used PORT will contiue to use it without problems, and in addition uses who must use PASV becuase of their firewall will also be able to connect.

FlashFXP can connect to same servers as CuteFTP. it doesn't matter what client they use. it's matter how that client is configured.

Hellraider · 09-03-2002, 01:54 PM

Same problem here

I want to connect to our FTP-Server at university. I tried PASSIVE and NON-PASSIV connections. But no connection is possible (Error: Connection timed out) I spoke to our sys-admin and he told me that he cant (or dont want to) enable the PASSIVE-Mode. He said something about security reasons (I dont know the exact reason that he told me).

So I can't connect to our server (Error message: Connection timed out)

This problem also appears at some other FTPs. The only FTP (out of about 10) where i could solve the problem was a G6-FTP-Server at a friend of mine: Problem was solved by enabling PASSIVE Mode.

But: Using e.g. Smart-FTP: There are no errors when connecting in PASSIVE AND NON-passiv mode. I tried no other FTP programs as this seems to be a FlashFXP-based problem.

Any Hints?

OS: Win2k SP2
RAM: 512 MB
CPU: Intel P3 1000 Mhz
FlashFXP: 2.0 RC2 Build 869
Network-Connection: ADSL

MxxCon · 09-03-2002, 02:13 PM

can you post logs from both, FlashFXP connecting w/ error and s-ftp connecting to same site w/o errors?

avenger_sleek · 09-03-2002, 02:14 PM

Quick question... how do you enable passive support for the g6 ftp server? Maybe my version is just old, but I would like to support it, if possible.

Thanks

Flow · 09-03-2002, 05:59 PM

Quote:

Originally posted by avenger_sleek
Quick question... how do you enable passive support for the g6 ftp server? Maybe my version is just old, but I would like to support it, if possible.

Thanks

http://www.bpftpserver.com/manual/manual_eng/index.html

Check under -->> "Multi-IP"

"Passive mode IP : when you run the server bahind proxy, passive mode reports current local ip (192.168.xxx.yyy for example). To make BPFTP reports correct ip, enter it in the ip box.

Passive port range : this is the range of ports that BPFTP Server will use with passive mode, (it is to simplify use of forwarding rule in router for example)."

djb · 09-04-2002, 10:57 AM

i've found that often even when unchecking the 'use pasv' option in prefs>proxy/firewall, flash will still attempt to connect using pasv sometimes... see if it helps to uncheck the pasv option in the site manager entry for your site.

bigstar · 09-04-2002, 02:21 PM

FlashFXP will use PASV mode for FXP transfers even if 'use passive mode' is unchecked.. FXP uses a seperate setting "Alternative FXP Method". In order for FXP to work 1 of the sites must allow PASV mode.

Hellraider · 09-13-2002, 05:34 AM

Hello again. Sorry that I reply so late, but I was on holidays

Here are the logs (You don not have to spent much time on this, because (for me) this effects only less than 0,5% of my connections so it is no big problem to use another FTP program for this. The No.1 FTP program was and will be FlashFXP

Log via FlashFXP "Use Passive Mode" disabled:

Connecting to xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx Port xxxxxx
220 Serv-U FTP-Server v2.5k for WinSock ready...
USER xxxxxx
331 User name okay, need password.
PASS (hidden)
230 User logged in, proceed.
SYST
215 UNIX Type: L8
PWD
257 "/" is current directory.
TYPE A
200 Type set to A.
PORT xxx,xxx,xxx,xxx,14,208
200 PORT Command successful.
LIST -al
150 Opening ASCII mode data connection for /bin/ls.
Connection lost: xxx.xxx.xxx.xxx

-----------------------------------------------------------------------------------

Log via FlashFXP "Use Passive Mode" enabled:

Connecting to xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx Port xxxxxx
220 Serv-U FTP-Server v2.5k for WinSock ready...
USER xxxxxx
331 User name okay, need password.
PASS (hidden)
230 User logged in, proceed.
SYST
215 UNIX Type: L8
CWD /
250 Directory changed to /
PWD
257 "/" is current directory.
TYPE A
200 Type set to A.
PASV
227 Entering Passive Mode (xxx,xxx,xxx,xxx,13,59)
Data Socket Error: Connection timed out

----------------------------------------------------------------------------------

Log via ******** "Use Passive Mode" enabled:

Resolving host name xxx.xxx.xxx.xxx...
Connecting to (xxx.xxx.xxx.xxx)
Connected to (xxxxxxxxxxxxxxxxxxxxxxx) -> IP: xxx.xxx.xxx.xxx PORT: xxxxxx.
Socket connected waiting for login sequence.
220 Serv-U FTP-Server v2.5k for WinSock ready...
USER xxxxxx
331 User name okay, need password.
PASS (hidden)
230 User logged in, proceed.
SYST
215 UNIX Type: L8
FEAT
500 'FEAT': command not understood.
REST 100
350 Restarting at 100 - send STORE or RETRIEVE to initiate transfer.
REST 0
350 Restarting at 0 - send STORE or RETRIEVE to initiate transfer.
PWD
257 "/" is current directory.
TYPE A
200 Type set to A.
PASV
227 Entering Passive Mode (xxx,xxx,xxx,xxx,13,64)
Opening data connection IP: xxx.xxx.xxx.xxx PORT: xxxxxx.
Ein Verbindungsversuch ist fehlgeschlagen, da die Gegenstelle nach einer bestimmten Zeitspanne nicht ordnungsgemÃ¤Ã reagiert hat, oder die hergestellte Verbindung war fehlerhaft, da der verbundene Host nicht reagiert hat.
PORT xxx,xxx,xxx,xxx,8,33
200 PORT Command successful.
Opening data connection IP: xxx.xxx.xxx.xxx PORT: xxxxxx.
LIST -aL
150 Opening ASCII mode data connection for /bin/ls.
Connection closed. Server timeout.

----------------------------------------------------------------------------------

Log via ******** "Use Passive Mode" disabled:

Resolving host name xxx.xxx.xxx.xxx...
Connecting to (xxx.xxx.xxx.xxx).
Connected to (xxxxxxxxxxxxxxxxxxxxxxxx) -> IP: xxx.xxx.xxx.xxx PORT: xxxxxx.
Socket connected waiting for login sequence.
220-Serv-U FTP-Server v2.5e for WinSock ready...
USER xxxxxx
331 User name okay, need password.
PASS (hidden)
230 User logged in, proceed.
SYST
215 UNIX Type: L8
FEAT
500 'FEAT': command not understood.
REST 100
350 Restarting at 100 - send STORE or RETRIEVE to initiate transfer.
REST 0
350 Restarting at 0 - send STORE or RETRIEVE to initiate transfer.
PWD
257 "/" is current directory.
TYPE A
200 Type set to A.
PORT xxx,xxx,xxx,xxx,10,65
200 PORT Command successful.
Opening data connection IP: xxx.xxx.xxx.xxx PORT: xxxxxx.
LIST -aL
150 Opening ASCII mode data connection for /bin/ls.
11547 bytes received successfully. (1.09 KB/s) (00:00:01).
226 Transfer complete.

avenger_sleek · 09-13-2002, 07:39 AM

Hi

Snce then I managed to upgrade my ftp deamon and this new version allows setting up ports for passive transfers.. so what I did was forward 50 ports to my ftp for all PASV users. I guess it's just a workaround at this point, but now I realize that doing PC -> router -> internet -> router -> PC is not even technically possible. sorry for all the trouble I caused.

MxxCon · 09-13-2002, 07:37 PM

Quote:

Originally posted by avenger_sleek
but now I realize that doing PC -> router -> internet -> router -> PC is not even technically possible. sorry for all the trouble I caused.

without either side fordwarding some ports it's impossible.
check out http://slacksite.com/other/ftp.html for pretty nice explanation