Topic: FTP not working outside of local network

[gage]

I have installed 5.1.2 on my system, I can access ftp from behind the local network, but I can't connect outside. I http is working fine, and I can ssh into my server and ppptp ok. I have ftp set to public and normal. I also loaded the update in the blade console.  Has anyone had this trouble before?

[gage]

another thing, I was running 4.1.3 for a year with no problems, now that I upgraded to 5.1.2  ftp does'nt work. when you check your mail, it might work once, it might not work the next time, its screwey!  Has anyone else had this kinds of problems?
Should I dump 5.1.2 and reinstall 4.1.3?

[gage]

This was a fresh install so Im sure Im not the only one to have this problem

[Rik]

Hi !
I also have the same problem...

[gage]

It doesnt look like anyone wants to acnowlege the problem. I usually get good help. But Im sure that were not the only ones to have this problem. Its keeping me from being able to work at home. Does anyone have any Ideas? Please!Rik wrote:
>
> Hi !
> I also have the same problem...

[Terry Brummell]

If it's any consolation, mine is a fresh install of 5.1.2 and FTP works fine.

Maybe posting some logs or a better description of the problem would help people better understand the problem.

[gage]

There is really nothing to post on it . I have it set up as server & gateway. and have access setup to allow ftp from outside local network. But when you try to ftp, you get a timeout or connection refusal. It seems to be just not allowing connections outside the local network anyway. I have tried changing the settings and changing them back. Didnt work. Just doesnt make sense. I have basically the same setup as when it was 4.1.3.

Its very frustrating

[TopGun]

I'm having the same problem. Hope someone has an answer.

[gage]

Well topgun. evidentally you and I are the only ones with external ftp problems. Its funny  too, cause ws-ftp says this when it finally times out it says "receive error: Blocking call cancelled."  What does that mean?

I have two ethernet cards installed. one is for the local network. 192.168.0.15
and one is for the external network 192.168.0.16
I have checked the configuration through review configuration and I do have ftp set to public and normal.
I have checked my router and I have port 21 forwarded to 192.168.0.16 my external ethernet card.
If im on a computer on the local network, it works fine.
But if im at home it doesnt work.

I can ssh. no problem
I can make a pptp tunnel. no problem.

where is everybody, are they still moving?????

[Dan Brown]

Gage, you can't do FTP through a simple port-forwarding arrangement, AFAIK.  As you never mentioned you had a router and port forwarding until now, there was no way for anybody else to have an idea of what could have been causing your problem.

[gage]

Oh. Thanks Dan, do you have any Ideas on what I need to do. I have it set up the same way I did with 4.1.3. I had port 21 forwarded to 192.168.0.16 which was my only card to the esmith machine. And that seemed to work.
now with 5.1 I had to add a eth card to the setup. All the ports are forwarded to the 192.168.0.16 card. which is the external network card.

Im sorry about not providing enough information. I guess Im not sure what all info to provide. The only  thing else is I did make sure that I had a zone file for ftp. I have ftp.securechoice.net set up in zone files on my name server.

[schotty]

Maybe I can help with Infos in this one.....

It is not enough to just forward port 21 with FTP. You must forward port 20 as well!!
I believe that port 20 is the controll port for FTP.... (Dont flame me when Im wrong....)
Also there are 2 connect types passive or active.....And Im not sure which one should be used.....I would guess passive.....

I cant tell you why noone posted an abswer , but I guess these profis, well sometimes need a bit of time...

God needed 7 days as well....

Greetings from Germany...


schotty

[Julian Luton]

gage - I've had exactly the same problem as well

You say you have a lan and a wan card in your server - not strictly true they are both on private ip's and you are port forwarding from your router to the second card. I had v5.0 working fine doing exactly the same things as your old server with a router doing port forwarding for me. I upgraded to v5.12 and ftp and appletalk over tcp/ip stop working outside my lan.
I have a xDSL connection with a small range of 'real' public ip's so I dumped all of the NAT/firewall/port forwarding functions of my router, chucked a second (wan)network card in the server and had the server do everything that I used to have the router do. Bingo - everything works a treat.
So to sum up - if you can give your second 'wan' nic a real public ip address everything will work.

All the best
Julian

[Thierry Bucco]

I have a similar problem.

Here is my configuration :

My linux box provides router and proxy features.

I have one ethernet card for the LAN and an Speedtouch USB modem for Internet access.

the problem is I can't acces my files outside of local network neither using ftp or appletalk over tcp/ip.

What must I do ?

thanks a lot.

Thierry

[Wesley]

I have a fresh install of 5.1.2 ftp from outside the LAN doesn't work.

I have a linksys router, I set the router to forward requests for any port to the e-smith machine. All other services work fine. FTP works as long as you are inside the LAN.

I just installed the upgrade #1 blade on the server. I can connect to the ftp from outside the LAN, however it takes an extremely long time to authenticate ( I am on a cable modem not real fast I know) sometimes 1 - 4 min.

here is the messages log for the last successful login
May 17 11:44:31 www PAM_pwdb[5429]: (ftp) session opened for user friends by (uid=0)
May 17 11:44:31 www proftpd[5429]: www.weswood1.net (pc-00001[192.168.1.1]) - USER friends: Login successful.

You can see that in order to login to the server, you must authenticate using PAM. I am fairly certain the a bug or glitch is what is causing the slowdown with PAM. However I am not very well versed about PAM and cant answer that question.

Maybe someone elso has some input.