Page 1 of 1

FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-06 15:36
by netinial
We are trying to connect some servers which are gives following error. if we use "USE Explicit FTP over TSL if available"

If we connect with ONLY Use Plain FTP. IT Success

How to define FTP Encryption TYPE especially ONLY Use Plain FTP via CMD line

We are currently using following one via KeePASS cmd://"..\FileZilla\filezilla.exe" {S:PROTOCOL}://{USERNAME}:{PASSWORD}@{TITLE}{S:PORT}{S:REMOTEPATH}

Here what we see when we use Explicit FTP over TSL if available

Thanks advance.

Status: Disconnected from server
Status: Resolving address of yachtcharteristanbul.net
Status: Connecting to 92.42.33.22:21...
Status: Connection established, waiting for welcome message...
Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Response: 220-You are user number 1 of 100 allowed.
Response: 220-Local time is now 18:35. Server port: 21.
Response: 220-This is a private system - No anonymous login
Response: 220-IPv6 connections are also welcome on this server.
Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: AUTH TLS
Response: 234 AUTH TLS OK.
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Command: USER yachtcha
Response: 331 User yachtcha OK. Password required
Command: PASS **********
Response: 230 OK. Current restricted directory is /
Command: OPTS UTF8 ON
Response: 200 OK, UTF-8 enabled
Command: PBSZ 0
Response: 200 PBSZ=0
Command: PROT P
Response: 200 Data protection level set to "private"
Status: Logged in
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is your current location
Command: TYPE I
Response: 200 TYPE is now 8-bit binary
Command: PASV
Response: 227 Entering Passive Mode (92,42,33,22,204,105)
Command: MLSD
Error: Connection timed out after 20 seconds of inactivity
Error: Failed to retrieve directory listing

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-06 17:16
by botg
This is a server-side problem. Please contact your server administrator or server hosting provider to have the server fixed.

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-06 18:03
by netinial
Dear Kosse,

Thank you for your answer.

However my question is not how to solve the problem.

My Question is how to connect this server via CMD LINE with the mode of "ONLY Use Plain FTP"

Because it is very convenient to use FileZilla over KEEPASS

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-06 23:39
by boco
Encryption type cannot be specified at the command line. The only possibility would be to define it in the specific Site Manager entry and call that entry from the command line with the -s parameter. Not possible from KeePass, I'm afraid.

Note the option to force Plain FTP will go away in the future.

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-07 09:12
by botg
Last but not least, passing passwords on the command-line is insecure. Command-line arguments persists over the entire run-time of a program, can be read across system account boundaries and are often accessed by other programs for telemetry purposes, potentially ending up in who knows which cloud.

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-07 12:07
by netinial
Dear Tim, Boco

Thank you for your both reply.

Is keeping passwords at sitemanager.xml more secure than passing arguments over cmd?

Biggest advantage of FileZilla over WinSCP is speed for "FTP".

However WinSCP is forgiving most FTP problems. And connecting.

FileZilla Command Line options are very limited. This is biggest adtange of WinSCP over FileZilla. WinSCP is very scriptable.

At least You should consider to pass sitemanager.xml contents to filezilla.exe. over CMD (if more command line options are not possible.)

So we can produce our own sitemanager.xml content on the fly and pass to filezilla

Something like filezilla.exe --site-manager='<?xml version="1.0"?><FileZilla3 version="3.40.0" platform="windows"><Servers><Server>Host>ftp.adress.com</Host>......'

Meanwhile
It is very easy to embed powershell scripts to Keepass.

cmd://powershell.exe -WindowStyle Hidden -ExecutionPolicy ByPass -Command "& {{NOTES}}"
Notes fields can be easily use as Powershell script.

Note
It is still possible to run filezilla with keepass via creating temp sitemanager.xml and run via -s command, however creating temp sitemanager.xml is information leak
And needs secure delete. Which needs another app to run.

Conclusion: please consider more command line options.

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-07 13:45
by botg
You can save the password in FileZilla and configure a master password.

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-08 09:26
by netinial
This is also good.

But would it be bad idea to have more command line options?

Re: FileZilla Command Line for FTP Encryption TYPE

Posted: 2019-02-08 17:58
by botg
Yes. FileZilla has been designed for interactive use, more command-line arguments would result in it being abused for automated tasks. For automated use consider using a dedicated command-line client.