how many passive ports are needed?

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
timmac
500 Command not understood
Posts: 4
Joined: 2006-08-17 09:11

how many passive ports are needed?

#1 Post by timmac » 2006-08-17 09:50

hi,
i read the FAQ and it says 100 passive ports should be sufficient. my firewall is the Windows Server 2003 RRAS basic firewall, and it doesn't support port ranges so i have to set them one by one :(
other users have reported success with 10 ports, and i've tried using ports 5000-5010. but i get about 30% success when trying to browse directories or transfer files. is that due to the small port range? i have disabled multiple connections for transfer on the client in an effort to use fewer ports.

the client is using Active mode, with a custom port range of 5000-5010 to match the server, connecting via implicit SSL on port 990.

server firewall has opened ports 20-22, 989-999, 5000-5010.

client router is forwarding ports 20-22, 989-999, 5000-5010 to my client PC.

no matter what i try i can't get a reliable connection. can anyone help?!
really appreciate any tips/suggestions... apart from buying a hardware firewall :)

here's the log showing a failed directory listing:

Status: Connecting to w.x.y.z:990 ...
Status: Connected with w.x.y.z:990, negotiating SSL connection...
Status: SSL connection established. Waiting for welcome message...
Response: 220-FileZilla Server version 0.9.18 beta
Response: 220 Welcome
Command: USER blah
Response: 331 Password required for blah
Command: PASS ******
Response: 230 Logged on
Command: SYST
Response: 215 UNIX emulated by FileZilla
Command: FEAT
Response: 211-Features:
Response: MDTM
Response: REST STREAM
Response: SIZE
Response: MLST type*;size*;modify*;
Response: AUTH SSL
Response: AUTH TLS
Response: UTF8
Response: CLNT
Response: 211 End
Command: PBSZ 0
Response: 200 PBSZ=0
Command: PROT P
Response: 200 Protection level set to P
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is current directory.
Status: Directory listing successful
Status: Retrieving directory listing...
Command: CWD /hello.ie/
Response: 250 CWD successful. "/hello.ie" is current directory.
Command: PWD
Response: 257 "/hello.ie" is current directory.
Command: CWD WebDocuments
Response: 250 CWD successful. "/hello.ie/WebDocuments" is current directory.
Command: PWD
Response: 257 "/hello.ie/WebDocuments" is current directory.
Command: TYPE A
Response: 200 Type set to A
Error: Failed to create listen socket
Error: Could not retrieve directory listing
Command: TYPE I
Response: 200 Type set to I

User avatar
botg
Site Admin
Posts: 35584
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

#2 Post by botg » 2006-08-17 13:45

Ten ports can be too few. It takes a while for sockets to fully close and to be reusable again.

timmac
500 Command not understood
Posts: 4
Joined: 2006-08-17 09:11

#3 Post by timmac » 2006-08-18 08:58

hi botg
thanks for the explanation. i'll try with a bigger range.
sound.

Post Reply