Trying to FORCE ACTIVE MODE

[lhweb]

I'm trying to login to my FTP site

But we are having issues and we can only do it with ACTIVE

Every time I force it from passive to active it still connects to passive..

I"m at a LOSS I have to find this all over but can't - please treat me like I'm in kindergarten as this is getting frustrating

Code: Select all

Status:	Connection closed by server
Status:	Disconnected from server
Status:	Resolving address of WEBSITE.com
Status:	Connecting to HIDDING INFO:21...
Status:	Connection established, waiting for welcome message...
Status:	Plain FTP is insecure. Please switch to FTP over TLS.
Status:	Server does not support non-ASCII characters.
Status:	Logged in
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/USER" is current directory.
Command:	TYPE I
Response:	200 Type set to I.
Command:	PORT HIDDING INFO,223,209
Response:	500 Invalid PORT Command.
Command:	PASV
Response:	227 Entering Passive Mode (HIDDING INFO,18,126).
Command:	LIST
Response:	425 Can't open data connection.
Error:	Failed to retrieve directory listing
Status:	Connection closed by server

[botg]

You destroyed all diagnostic information. Please post an unobfuscated log.

[lucas_pnw]

I'm having the same issue while trying to have FZ Client be active mode against a SOCKS5 proxy.
It's doing EPSV when it should be issuing a PORT or EPRT command.

Like OP I'm trying to test something where part of the chain drops all "Entering Passive Mode" messages, so these never make it to the client.

Active mode has been forced in the global settings menu and also in the site in Site Manager.

The logs are attached as a screenshot -- this was running in an isolated environment.

[boco]

Active Mode does not work with proxies. Using generic proxies always forces Passive Mode. There is even a warning on the settings page.

2023-04-27 03_35_34-Settings.png (1.85 KiB) Viewed 1857 times

[lucas_pnw]

Thanks for the reply boco!

In this case I'm using a SOCKS 5 proxy which FZ should be able to tell to open the correct TCP tunnels for the data channels.

This isn't a generic (HTTP) proxy where the client is telling it "GET ftp://foo.bar/baz HTTP/1.1\r\nHost: foo.bar\r\n\r\n".

[boco]

"Generic proxy" is the name of the settings tab. AFAIK, all proxies on that tab (HTTP, SOCKS4, SOCKS5) force Passive mode. Note: HTTP proxy uses CONNECT.

Active mode means, that the server is making outgoing connections back to you, for the data connections. Don't think that's possible with a simple proxy.

[botg]

While SOCKS5 could on paper be used for active mode, the reality looks more grim. Testing with actual proxies has shown that they tend to fill certain reply fields with bogus values, making it impossible to use active mode with SOCKS5. This is why this functionality has never been implemented for SOCKS5 in FileZilla.