dyndns and filezilla server

[philmand]

Hello,
I am trying to ftp from a windows client ftp (I call it from a DOS script) to a FileZilla server. The Router and Virus software have been altered to allow FTP/UDP going both ways on the server for ports 21-22 and for 20101-20120. I reach the FileZilla server by using DynDNS.

https://ftptest.net// it seems to work and provides me with a complete directory listing of the ftp folder.

The problem is when I ftp a file from the client. I get a 425 error "Can't open data connection for transfer of..."

I tried with Active FTP on both the client and FileZilla server, and I got the 425 error. After reading the Network Configuration document and reading a few posts, I decided to attempt the Passive FTP. The script on the client includes the QUOTE PASV option. I modified the FileZilla server setting to the following:
General Settings / Listen on these ports: 20 21
Passive Mode Settings / Use custom port range: Checked and 20101-20120
Passive Mode Settings / Retrieve External IP Address from: http://ip.filezilla-project.org/ip.php
Passive Mode Settings / Don't use external IP for local connections: Checked

The FileZilla server log contains the following:
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> Connected on port 21, sending welcome message...
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> 220-FileZilla Server version 0.9.46 beta
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> 220 Please visit http://sourceforge.net/projects/filezilla/
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> USER susanna
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> 331 Password required for susanna
(000031)11/14/2014 16:03:16 PM - (not logged in) (50.133.136.10)> PASS ********
(000031)11/14/2014 16:03:16 PM - susanna (50.133.136.10)> 230 Logged on
(000031)11/14/2014 16:03:16 PM - susanna (50.133.136.10)> TYPE I
(000031)11/14/2014 16:03:16 PM - susanna (50.133.136.10)> 200 Type set to I
(000031)11/14/2014 16:03:17 PM - susanna (50.133.136.10)> PORT 50,133,136,10,195,189
(000031)11/14/2014 16:03:17 PM - susanna (50.133.136.10)> 200 Port command successful
(000031)11/14/2014 16:03:17 PM - susanna (50.133.136.10)> STOR Peace_Prayer_1019.pdf
(000031)11/14/2014 16:03:17 PM - susanna (50.133.136.10)> 150 Opening data channel for file upload to server of "/Peace_Prayer_1019.pdf"
(000031)11/14/2014 16:03:27 PM - susanna (50.133.136.10)> 425 Can't open data connection for transfer of "/Peace_Prayer_1019.pdf"
(000031)11/14/2014 16:05:28 PM - susanna (50.133.136.10)> 421 Connection timed out.
(000031)11/14/2014 16:05:28 PM - susanna (50.133.136.10)> disconnected.

I just can't figure out what the problem is. Thanks for taking a look at this.

[botg]

The script on the client includes the QUOTE PASV option.

That won't do any good, it merely tells the used client to send the PASV command, yet it does not switch the client into passive mode.

[philmand]

Thanks botg. I removed the "QUOTE PASV" from the client side. I still get the 425 error after it connects. I've attached some screenshots from the server side.

ON the client side I use two similar scripts to post the file on two different servers. The file FTP's fine on the other server (HostGator).

The server with FileZilla (On a Windows 7 platform using DynDNS to identify it) is having the problem.
The client launches a script to FTP to the FileZilla client:
"ftp -n -i -g -s:\ftp_oracle_comm.txt server.example.com"

ftp_oracle_com.txt is generated uniquely for every file it FTP's. It contains the following:
user the_username the_password
binary
put "C:\Users\USER\Documents\public_html\hymn_lyrics\Ready_The_Way_1020.pdf"
quit

Thanks for looking at this.

[boco]

First, the Windows ftp.exe client does not support Passive mode at all. Shame on that pathetic thing. The QUOTE PASV or LITERAL PASV myth flowing around the net is a hoax.

Consider using a real command line client that supports Passive mode and even FTP over TLS, like lftp. I've heard that curl also works. There are Windows ports for both.

[philmand]

Hi. Thanks for replying.
Can you confirm that I MUST use Passive mode if the server is resolved using DynDNS?
If I'm not forced to use Passive, I'd like to use the Active mode. If that's the case, what would I have to change use Active? If I'm forced to use Passive, I'll investigate lftp or something similar.
Thanks!

[boco]

Can you confirm that I MUST use Passive mode if the server is resolved using DynDNS?

You don't have to, but Active mode requires the client to forwards ports. Every client that wants to use Active must do that. And here's the next catch with ftp.exe - the FTP client must be configured to send the public IP of the client. The Windows ftp.exe cannot be configured, making it NAT-incompatible (read: incompetent). MS did never improve ftp.exe, despite being one of the longest-standing packages in Windows.

If I'm not forced to use Passive, I'd like to use the Active mode. If that's the case, what would I have to change use Active? If I'm forced to use Passive, I'll investigate lftp or something similar.
Thanks!

You cannot use ftp.exe behind properly configured NAT as you cannot tell it to send the public IP as required. Many consumer-grade routers allow using it and switch the IP themselves, however
1. you rely on non-standardized and unreliable behavior,
2. you are pinned to port 21, and
3. you can use only unsecured FTP.

[philmand]

Hello boco,
I used cURL for my cleint scripted FTP. Not difficult to install or use. Everything works fine now.
Great direction.
Alle ist im Ordnung.
Vielen Danke!