What IP address do I use for the passive mode settings?

[bmacbmac]

Hi. In the passive mode settings I have a custom port range of 50000-50100. I also have "use the following ip" selected. Do I use my internal IP address of my FTP server? Or do I put in my public internet IP address in here?

I noticed that some clients can connect fine when I just have the internet IP address entered here. Some users that were unable to connect are now able to connect now that I changed it to my internal local IP of the ftp server.

I'm not sure if this change will affect other users.

What is the intended IP address for this field?

Thanks!

[botg]

It needs to be your public IP address.

[bmacbmac]

Thanks for the quick reply. Can you tell me what you think my issue may be?

I have two offices who are unable to connect to get a directory listing when the External public IP address is used. Only when the internal ftp ip address is used are they able to get a directory listing on my server.

I have ports 50000 to 50100 specified in Filezilla and confirmed they are set up to forward to my ftp server on the router.

[botg]

Can you please post some logs from preferably both the server as well as the used client software?

[bmacbmac]

Ok, I have 4 posts coming showing all logs for active/passive with the internal IP and the external IP set. Please note that X.X.X.X is my FTP server public IP address. Y.Y.Y.Y is the public IP address of the ftp client trying to connect.

[bmacbmac]

Internal IP of FTP Server in FileZilla - 10.29.3.58 - Active Connection

Client Log:
Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.081000 seconds, Waiting for Server Response
220-FileZilla Server version 0.9.39 beta
220-written by Tim Kosse (Tim.Kosse@gmx.de)
220 Please visit http://sourceforge.net/projects/filezilla/
Host type (1): AUTO
USER FTPUSERNAME
331 Password required for FTPUSERNAME
PASS (hidden)
230 Logged on
SYST
215 UNIX emulated by FileZilla
Host type (2): Unix (Standard)
CLNT WS_FTP_Professional 12.2
200 Don't care
PWD
257 "/" is current directory.
TYPE A200 Type set to A
PORT 192,168,16,1,212,205
200 Port command successful
LIST
150 Opening data channel for directory list.

Server Log
Internal IP - Active - Server Log
006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> USER FTPUSERNAME
(006990)8/15/2011 18:19:15 PM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSERNAME
(006990)8/15/2011 18:19:16 PM - (not logged in) (Y.Y.Y.Y)> PASS *****
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 230 Logged on
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> SYST
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 215 UNIX emulated by FileZilla
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> CLNT WS_FTP_Professional 12.2
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Don't care
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> PWD
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 257 "/" is current directory.
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> TYPE A
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Type set to A
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> PORT Y,Y,Y,Y,212,205
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Port command successful
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> LIST
(006990)8/15/2011 18:19:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 150 Opening data channel for directory list.
(006990)8/15/2011 18:19:27 PM - FTPUSERNAME (Y.Y.Y.Y)> 425 Can't open data connection.

[bmacbmac]

Internal IP Of FTP Server in Filezilla - 10.29.3.58 - Passive Connection (THIS IS THE ONLY ONE THAT WORKS FOR THE CLIENT)

Client Log
Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.085000 seconds, Waiting for Server Response
220-FileZilla Server version 0.9.39 beta
220-written by Tim Kosse (Tim.Kosse@gmx.de)
220 Please visit http://sourceforge.net/projects/filezilla/
Host type (1): AUTO
USER FTPUSERNAME
331 Password required for FTPUSERNAME
PASS (hidden)
230 Logged on
SYST
215 UNIX emulated by FileZilla
Host type (2): Unix (Standard)
CLNT WS_FTP_Professional 12.2
200 Don't care
PWD
257 "/" is current directory.
TYPE A200 Type set to A
PASV
227 Entering Passive Mode (X,X,X,X,195,127)
connecting data channel to X.X.X.X:195,127(50047)
data channel connected to X.X.X.X:195,127(50047)
LIST
150 Connection accepted
transferred 1385 bytes in 0.015 seconds, 738.667 kbps ( 92.333 kBps), transfer succeeded.
226 Transfer OK



Server Log
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> USER FTPUSERNAME
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSERNAME
(006991)8/15/2011 18:24:10 PM - (not logged in) (Y.Y.Y.Y)> PASS *****
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 230 Logged on
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> SYST
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 215 UNIX emulated by FileZilla
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> CLNT WS_FTP_Professional 12.2
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Don't care
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> PWD
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 257 "/" is current directory.
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> TYPE A
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Type set to A
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> PASV
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 227 Entering Passive Mode (10,29,3,58,195,127)
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> LIST
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 150 Connection accepted
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 226 Transfer OK

[bmacbmac]

External Public IP address entered into FileZilla - X.X.X.X - Active Connection

Client Log
Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.081000 seconds, Waiting for Server Response
220-FileZilla Server version 0.9.39 beta
220-written by Tim Kosse (Tim.Kosse@gmx.de)
220 Please visit http://sourceforge.net/projects/filezilla/
Host type (1): AUTO
USER FTPUSERNAME
331 Password required for FTPUSERNAME
PASS (hidden)
230 Logged on
SYST
215 UNIX emulated by FileZilla
Host type (2): Unix (Standard)
CLNT WS_FTP_Professional 12.2
200 Don't care
PWD
257 "/" is current directory.
TYPE A200 Type set to A
PORT 192,168,16,1,212,209
200 Port command successful
LIST
150 Opening data channel for directory list.


Server Log
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> USER FTPUSERNAME
(006992)8/15/2011 18:25:57 PM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSERNAME
(006992)8/15/2011 18:25:58 PM - (not logged in) (Y.Y.Y.Y)> PASS *****
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 230 Logged on
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> SYST
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 215 UNIX emulated by FileZilla
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> CLNT WS_FTP_Professional 12.2
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Don't care
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> PWD
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 257 "/" is current directory.
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> TYPE A
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Type set to A
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> PORT Y,Y,Y,Y,212,209
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Port command successful
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> LIST
(006992)8/15/2011 18:25:58 PM - FTPUSERNAME (Y.Y.Y.Y)> 150 Opening data channel for directory list.
(006992)8/15/2011 18:26:09 PM - FTPUSERNAME (Y.Y.Y.Y)> 425 Can't open data connection.

[bmacbmac]

External IP entered into Filezilla - X.X.X.X - Passive Mode

Client Log

Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.088000 seconds, Waiting for Server Response
220-FileZilla Server version 0.9.39 beta
220-written by Tim Kosse (Tim.Kosse@gmx.de)
220 Please visit http://sourceforge.net/projects/filezilla/
Host type (1): AUTO
USER FTPUSERNAME
331 Password required for FTPUSERNAME
PASS (hidden)
230 Logged on
SYST
215 UNIX emulated by FileZilla
Host type (2): Unix (Standard)
CLNT WS_FTP_Professional 12.2
200 Don't care
PWD
257 "/" is current directory.
TYPE A200 Type set to A
PASV
Error reading response from server.
It appears that the connection is dead. Attempting reconnect...
Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.089000 seconds, Waiting for Server Response
220-FileZilla Server version 0.9.39 beta
220-written by Tim Kosse (Tim.Kosse@gmx.de)
220 Please visit http://sourceforge.net/projects/filezilla/
Host type (1): AUTO
USER FTPUSERNAME
331 Password required for FTPUSERNAME
PASS (hidden)
230 Logged on
SYST
215 UNIX emulated by FileZilla
Host type (2): Unix (Standard)
CLNT WS_FTP_Professional 12.2
200 Don't care
PWD
257 "/" is current directory.
New connection OK. Reissuing command.
TYPE A
200 Type set to A
PASV
Error reading response from server.
QUIT
Failed Sending Command. The connection is probably dead.
Dead connections are not restarted For "QUIT" commands.
Connection closed. Ready for next connection.



Server Log
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> USER FTPUSERNAME
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSERNAME
(006993)8/15/2011 18:27:15 PM - (not logged in) (Y.Y.Y.Y)> PASS *****
(006993)8/15/2011 18:27:15 PM - FTPUSERNAME (Y.Y.Y.Y)> 230 Logged on
(006993)8/15/2011 18:27:15 PM - FTPUSERNAME (Y.Y.Y.Y)> SYST
(006993)8/15/2011 18:27:15 PM - FTPUSERNAME (Y.Y.Y.Y)> 215 UNIX emulated by FileZilla
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> CLNT WS_FTP_Professional 12.2
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Don't care
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> PWD
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 257 "/" is current directory.
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> TYPE A
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Type set to A
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> PASV
(006993)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 227 Entering Passive Mode (X,X,X,X,195,128)
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> USER FTPUSERNAME
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSERNAME
(006994)8/15/2011 18:27:16 PM - (not logged in) (Y.Y.Y.Y)> PASS *****
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 230 Logged on
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> SYST
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 215 UNIX emulated by FileZilla
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> CLNT WS_FTP_Professional 12.2
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Don't care
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> PWD
(006994)8/15/2011 18:27:16 PM - FTPUSERNAME (Y.Y.Y.Y)> 257 "/" is current directory.
(006994)8/15/2011 18:27:17 PM - FTPUSERNAME (Y.Y.Y.Y)> TYPE A
(006994)8/15/2011 18:27:17 PM - FTPUSERNAME (Y.Y.Y.Y)> 200 Type set to A
(006993)8/15/2011 18:27:17 PM - FTPUSERNAME (Y.Y.Y.Y)> disconnected.
(006994)8/15/2011 18:27:17 PM - FTPUSERNAME (Y.Y.Y.Y)> PASV
(006994)8/15/2011 18:27:17 PM - FTPUSERNAME (Y.Y.Y.Y)> 227 Entering Passive Mode (X,X,X,X,195,129)
(006994)8/15/2011 18:27:18 PM - FTPUSERNAME (Y.Y.Y.Y)> disconnected.

[botg]

Client Log:
Connecting to X.X.X.X:21
Connected to X.X.X.X:21 in 0.081000 seconds, Waiting for Server Response
[...]
PORT 192,168,16,1,212,205

Client configuration is just incorrect. It is connected to a server over the internet using a public IP address, yet tries to establish the data connection on a private address.

Server Log
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> PASV
(006991)8/15/2011 18:24:10 PM - FTPUSERNAME (Y.Y.Y.Y)> 227 Entering Passive Mode (10,29,3,58,195,127)

Same thing, just with roles reversed. Server configuration is incorrect.

Please read the Network Configuration guide.

[bmacbmac]

Thanks. I read the network configuration guide. I think I now have my server set up correctly (although my client can still only connect when my server is set up INcorrectly).

Server Setup:
FileZilla Passive Mode Settings:
Port Range: 50000 - 50100
Use the following IP: X.X.X.X
NAT Router:
Forward ports 50000 - 50100 to 10.29.2.58
Forward ports 20, 21 to 10.29.2.58



I had my user download Filezilla client, but still unable to connect. When my server is set up with the correct IP address, the client will disconnect immediately upon going into passive mode. I'm assuming the problem is on the client end, but I'm just not sure where to go from here. Does this new log give any useful info?


Server Log
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> Connected, sending welcome message...
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> 220-FileZilla Server version 0.9.39 beta
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> 220 Please visit http://sourceforge.net/projects/filezilla/
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> USER FTPUSER
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> 331 Password required for FTPUSER
(007477)8/17/2011 6:04:42 AM - (not logged in) (Y.Y.Y.Y)> PASS *****
(007477)8/17/2011 6:04:42 AM - FTPUSER (Y.Y.Y.Y)> 230 Logged on
(007477)8/17/2011 6:04:42 AM - FTPUSER (Y.Y.Y.Y)> PWD
(007477)8/17/2011 6:04:42 AM - FTPUSER (Y.Y.Y.Y)> 257 "/" is current directory.
(007477)8/17/2011 6:04:42 AM - FTPUSER (Y.Y.Y.Y)> TYPE I
(007477)8/17/2011 6:04:42 AM - FTPUSER (Y.Y.Y.Y)> 200 Type set to I
(007477)8/17/2011 6:04:43 AM - FTPUSER (Y.Y.Y.Y)> PASV
(007477)8/17/2011 6:04:43 AM - FTPUSER (Y.Y.Y.Y)> 227 Entering Passive Mode (X,X,X,X,195,119)
(007477)8/17/2011 6:04:44 AM - FTPUSER (Y.Y.Y.Y)> disconnected.


Client Log
Status: Connecting to X.X.X.X:21...
Status: Connection established, waiting for welcome message...
Response: 220-FileZilla Server version 0.9.39 beta
Response: 220-written by Tim Kosse (Tim.Kosse@gmx.de)
Response: 220 Please visit http://sourceforge.net/projects/filezilla/
Command: USER FTPUSER
Response: 331 Password required for FTPUSER
Command: PASS *****
Response: 230 Logged on
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is current directory.
Command: TYPE I
Response: 200 Type set to I
Command: PASV
Error: Disconnected from server: ECONNABORTED - Connection aborted
Error: Failed to retrieve directory listing

[boco]

Your logs are hard to analyze, as you destroyed the most important information: The IPs.

[botg]

(although my client can still only connect when my server is set up INcorrectly)

Sounds very much like a NAT router or firewall that is actively changing the exchanged data.

[bmacbmac]

Sounds very much like a NAT router or firewall that is actively changing the exchanged data.

Would you say this is the case on the server end or client end?

[botg]

Rule of thumb: If there is any issue with passive mode, it's something on the server's end of the connection. If there is any issue with active mode, it's something on the client's end of the connection.