making sure your port is open to all external IP addresses

Come here to discuss FileZilla and FTP in general

Moderator: Project members

Message
Author
User avatar
boco
Contributor
Posts: 26940
Joined: 2006-05-01 03:28
Location: Germany

Re: making sure your port is open to all external IP addresses

#16 Post by boco » 2023-12-22 13:48

Correct, port forwards are done in the router. Needs to be the complete range.
Complete range must also be opened in the server's firewall.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

pythonprogram
503 Bad sequence of commands
Posts: 21
Joined: 2023-10-05 11:33

Re: making sure your port is open to all external IP addresses

#17 Post by pythonprogram » 2024-01-02 23:13

So, I've still been working hard at this and I was able to get into my router and set the port range in the port forwarding along with setting it to port 21 for this computer that I am using. When I tried it out in the FTP tester I received the following message:

Error: Server returned unroutable private IP address in PASV reply

Make sure the server is configured to allow passive mode connections.
If the server is behind a NAT router, make sure the server knows its external IP address.
The range of ports used for passive mode must be opened in all involved firewalls.
The range of ports used for passive mode must be forwarded by all involved NAT routers.
Try uninstalling all firewalls and plug your computer directly into your modem, thus bypassing the router.

Some help would be greatly appreciated. I think I am getting close to getting this completed and with help I know it can be done. Thank you

pythonprogram
503 Bad sequence of commands
Posts: 21
Joined: 2023-10-05 11:33

Re: making sure your port is open to all external IP addresses

#18 Post by pythonprogram » 2024-01-02 23:21

When it connects I then receive the following message:

Warning: The entered address does not resolve to an IPv6 address.
Status: Connected, waiting for welcome message...
Reply: 220-FileZilla Server 1.7.3
Reply: 220 Please visit https://filezilla-project.org/
Command: CLNT https://ftptest.net on behalf of 2601:47:8890:af3:9c3b:eeed:3fb5:ebf0
Reply: 200 Don't care.
Command: AUTH TLS
Reply: 234 Using authentication type TLS.
Status: Performing TLS handshake...
Status: TLS handshake successful, verifying certificate...
Status: Received 1 certificates from server.
Status: cert[0]: subject='CN=filezilla-server self signed certificate' issuer='CN=filezilla-server self signed certificate'
Command: USER pggen
Reply: 331 Please, specify the password.
Command: PASS ************
Reply: 230 Login successful.
Command: SYST
Reply: 215 UNIX emulated by FileZilla.
Command: FEAT
Reply: 211-Features:
Reply: MDTM
Reply: REST STREAM
Reply: SIZE
Reply: MLST type*;size*;modify*;perm*;
Reply: MLSD
Reply: AUTH SSL
Reply: AUTH TLS
Reply: PROT
Reply: PBSZ
Reply: UTF8
Reply: TVFS
Reply: EPSV
Reply: EPRT
Reply: MFMT
Reply: 211 End
Command: PBSZ 0
Reply: 200 PBSZ=0
Command: PROT P
Reply: 200 Protection level set to P
Command: PWD
Reply: 257 "/" is current directory.
Status: Current path is /
Command: TYPE I
Reply: 200 Type set to I
Command: PASV
Reply: 227 Entering Passive Mode
Error: Server returned unroutable private IP address in PASV reply

User avatar
boco
Contributor
Posts: 26940
Joined: 2006-05-01 03:28
Location: Germany

Re: making sure your port is open to all external IP addresses

#19 Post by boco » 2024-01-03 03:45

Reply: 227 Entering Passive Mode
There should be more on this line, never modify logs. According to the test, you didn't tell the Server your public IP, it returns the private one which is unusable in this context.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

pythonprogram
503 Bad sequence of commands
Posts: 21
Joined: 2023-10-05 11:33

Re: making sure your port is open to all external IP addresses

#20 Post by pythonprogram » 2024-01-03 11:00

Reply: 227 Entering Passive Mode (10,0,0,240,225,58)

That was the rest of the line. Thank you for your help.

I thought I was using my public IP address? I went to google and typed in what is my IP address. I then used that address (IPV4) to do the log in. At this point I am not really sure what is going on. Please help.

User avatar
botg
Site Admin
Posts: 35566
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: making sure your port is open to all external IP addresses

#21 Post by botg » 2024-01-03 11:39

Please study our Network Configuration guide for an in-depth explanation, it will all become clear.

pythonprogram
503 Bad sequence of commands
Posts: 21
Joined: 2023-10-05 11:33

Re: making sure your port is open to all external IP addresses

#22 Post by pythonprogram » 2024-01-03 13:21

Thanks for the reply @Botg

I've read it about 5 times..look at several youtube videos and I've tried possible solutions with ChatGPT. In the Network configuration guide it even says the setting up and testing FTP Server instructions are outdated.

At this point I just do not know. I've been at it for weeks with this.

User avatar
botg
Site Admin
Posts: 35566
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: making sure your port is open to all external IP addresses

#23 Post by botg » 2024-01-03 14:58

In the passive mode settings of the server you need to tell it your public IP address.

pythonprogram
503 Bad sequence of commands
Posts: 21
Joined: 2023-10-05 11:33

Re: making sure your port is open to all external IP addresses

#24 Post by pythonprogram » 2024-01-04 10:17

I received the following message:

"Your server is working and assorted routers/firewalls have been correctly configured for explicit FTP over TLS as performed by this test. However there have been warnings about compatibility issues, not all users will be able to use your server.
For maximum compatibility, consider resolving these warnings."

It seems as though I am set up. Thank you!! I appreciate you @botg and boco for your help and patience that you've had with me. This was really difficult for me to understand because I am new to this. I do not know anything about how this stuff works.

Post Reply