Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: iltasu on December 12, 2006, 07:06:20 PM

Title: FTP error, it isn't a passive server?
Post by: iltasu on December 12, 2006, 07:06:20 PM
Hi all,
I'm trying to access the sme server from the internet via FTP, The sme server is behind a firewall, on the firewall I natted to the sme server ip a the ports 20 21 and the passiveports range 30000 - 30050 setted this range in the proftpd.conf template and xpanded it after that, I restarted the daemon with non errors.
When I try to connect from outside, using the ftp command line utility, I can login, I issue the passive command and it answers that passive mode is on, after that whichever command I issue (be it a ls, dir, mkdir...) the server answers:

500 The server returned invalid response for PASV command
Passive mode refused.

if I issue the ls command before issuing the passive command (is it in active?), I get:

500 Invalid PORT command.
ftp: bind: Address already in use

which I cannot really understand.

Here I paste the session:

rokepo@streamer:~$ ftp xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx.
220 yyy.yyy.yyy.yyy FTP server ready
Name (xxx.xxx.xxx.xxx:rokepo): aaaaaa
331 Password required for gtassoni.
Password:
230 User aaaaaa logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
500 Invalid PORT command.
ftp: bind: Address already in use
ftp> passive
Passive mode on.
ftp> ls
500 The server returned invalid response for PASV command.
Passive mode refused.
ftp> exit
Title: FTP error, it isn't a passive server?
Post by: iltasu on December 13, 2006, 03:53:37 PM
Strangely enough from within the same network it works like a charm, it must be some firewall problem, but not mine firewall since I have both the rules to allow and to nat the PassiveRange ports.
I can't understand where is the dam....
Title: FTP error, it isn't a passive server?
Post by: cactus on December 13, 2006, 04:28:15 PM
Quote from: "iltasu"
Strangely enough from within the same network it works like a charm, it must be some firewall problem, but not mine firewall since I have both the rules to allow and to nat the PassiveRange ports.
I can't understand where is the dam....
Isn't there some more detail in the log files? Perhaps /var/log/proftpd/*?
Title: FTP error, it isn't a passive server?
Post by: iltasu on December 13, 2006, 06:10:45 PM
Quote from: "cactus"
Isn't there some more detail in the log files? Perhaps /var/log/proftpd/*?


Thank you for the reply, here is the log in the current file this is what get written when I issue
ftp xxx.xxx.xxx.xxx
I give username and password
issue an ls
and it answers:
500 Invalid PORT command.
ftp: bind: Address already in use

@40000000458032c614f015a4 tcpsvd: info: status 1/40
@40000000458032c614f0486c tcpsvd: info: pid 12384 from 85.18.163.114
@40000000458032c614f06f7c tcpsvd: info: concurrency 12384 85.18.163.114 1/4
@40000000458032c614f09a74 tcpsvd: info: start 12384 0:192.168.131.3 ::85.18.163.114:3152 ./peers/0

And if I issue (to enter passive mode, but I don't need it, I would be happy even in active mode):
passive
ls
and it answers:
500 The server returned invalid response for PASV command.
Passive mode refused.

Nothing got written to the log file. O_O

Thanks for the answers.