Having trouble with Error Code 425

[Emilio]

I'm unable to successfully connect with ftptest.net, which gives me a 425 error.

I'm running FileZilla Server 0.9.60 on a Windows 7 machine. Using port 30497 instead of 21:


I have FTP over TLS enabled. I'm using passive ports 52000 - 53000 and I've manually typed in my public IP address because ip.php only returns 127.0.0.1.


This is the result log from ftptest.net:

Warning: Selected port (30497) is not the default port (21) of the selected protocol.
Status: Resolving address of 24.47.131.142
Status: Connecting to 24.47.131.142
Warning: The entered address does not resolve to an IPv6 address.
Status: Connected, waiting for welcome message...
Reply: 220-FileZilla Server 0.9.60 beta
Reply: 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
Reply: 220 Please visit https://filezilla-project.org/
Command: CLNT https://ftptest.net on behalf of 24.47.131.142
Reply: 200 Don't care
Command: AUTH TLS
Reply: 234 Using authentication type TLS
Status: Performing TLS handshake...
Status: TLS handshake successful, verifying certificate...
Status: Received 1 certificates from server.
Status: cert[0]: subject='C=**,ST=*****,L=*****,O=*****,OU=*****,EMAIL=*****' issuer='C=*****,ST=*****,L=*****,O=*****,OU=*****,EMAIL=*****'
Command: USER emilio
Reply: 331 Password required for emilio
Command: PASS ******
Reply: 230 Logged on
Command: SYST
Reply: 215 UNIX emulated by FileZilla
Command: FEAT
Reply: 211-Features:
Reply: MDTM
Reply: REST STREAM
Reply: SIZE
Reply: MLST type*;size*;modify*;
Reply: MLSD
Reply: AUTH SSL
Reply: AUTH TLS
Reply: PROT
Reply: PBSZ
Reply: UTF8
Reply: CLNT
Reply: MFMT
Reply: EPSV
Reply: EPRT
Reply: 211 End
Command: PBSZ 0
Reply: 200 PBSZ=0
Command: PROT P
Reply: 200 Protection level set to P
Command: PWD
Reply: 257 "/" is current directory.
Status: Current path is /
Command: TYPE I
Reply: 200 Type set to I
Command: PASV
Reply: 227 Entering Passive Mode (24,47,131,142,205,9)
Command: MLSD
Reply: 425 Can't open data connection for transfer of "/"
Error: Listing failed

And this is the log from my server:

Retrieving settings, please wait...
Done retrieving settings
Sending settings, please wait...
Done sending settings.
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> Connected on port 30497, sending welcome message...
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> 220-FileZilla Server 0.9.60 beta
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> 220 Please visit https://filezilla-project.org/
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> CLNT https://ftptest.net on behalf of 24.47.131.142
(000058)9/6/2017 16:07:42 PM - (not logged in) (136.243.154.86)> 200 Don't care
(000058)9/6/2017 16:07:43 PM - (not logged in) (136.243.154.86)> AUTH TLS
(000058)9/6/2017 16:07:43 PM - (not logged in) (136.243.154.86)> 234 Using authentication type TLS
(000058)9/6/2017 16:07:43 PM - (not logged in) (136.243.154.86)> TLS connection established
(000058)9/6/2017 16:07:43 PM - (not logged in) (136.243.154.86)> USER emilio
(000058)9/6/2017 16:07:43 PM - (not logged in) (136.243.154.86)> 331 Password required for emilio
(000058)9/6/2017 16:07:44 PM - (not logged in) (136.243.154.86)> PASS ******
(000058)9/6/2017 16:07:44 PM - emilio (136.243.154.86)> 230 Logged on
(000058)9/6/2017 16:07:44 PM - emilio (136.243.154.86)> SYST
(000058)9/6/2017 16:07:44 PM - emilio (136.243.154.86)> 215 UNIX emulated by FileZilla
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> FEAT
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> 211-Features:
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> MDTM
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> REST STREAM
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> SIZE
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> MLST type*;size*;modify*;
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> MLSD
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> AUTH SSL
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> AUTH TLS
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> PROT
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> PBSZ
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> UTF8
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> CLNT
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> MFMT
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> EPSV
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> EPRT
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> 211 End
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> PBSZ 0
(000058)9/6/2017 16:07:45 PM - emilio (136.243.154.86)> 200 PBSZ=0
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> PROT P
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> 200 Protection level set to P
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> PWD
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> 257 "/" is current directory.
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> TYPE I
(000058)9/6/2017 16:07:46 PM - emilio (136.243.154.86)> 200 Type set to I
(000058)9/6/2017 16:07:47 PM - emilio (136.243.154.86)> PASV
(000058)9/6/2017 16:07:47 PM - emilio (136.243.154.86)> 227 Entering Passive Mode (24,47,131,142,205,9)
(000058)9/6/2017 16:07:47 PM - emilio (136.243.154.86)> MLSD
(000058)9/6/2017 16:07:57 PM - emilio (136.243.154.86)> 425 Can't open data connection for transfer of "/"
(000058)9/6/2017 16:07:57 PM - emilio (136.243.154.86)> disconnected.

I have allowed the Server program through my firewall:


I have added an inbound rule for the ports I opened in my firewall:


I have opened the necessary ports on my router:


I'm not sure what else to do/check at this point. Is there something glaring I've missed?

Thank you in advance.

[botg]

Are you sure you are forwarding a range of ports and aren't merely forwarding and mapping the single port 52000 to the single port 53000?

[Emilio]

Actually I was worried that was happening, because I see no other way on my router to open up a range of ports:


I'd rather not open up 1000 ports manually, so I'm really not sure what to do if that's really the issue. Is there any way to get around this? And if it comes to it, what the smallest possible range of ports to open? Could it work with 5?

Edit: I tried with two ports and it works. Unfortunately I imagine myself burning through a lot more than 2 ports in 4 minutes, so this probably won't work out. I wish my router allowed for a range of ports to be entered.

[boco]

The feature for forwarding ranges is often named "Virtual Server".

Note that the 1001 ports are not carved in stone. You need as many ports as you can saturate in ~4 minutes. Every listing and every transfer needs a port which is then unavailable for usage until the 4 minutes are up.
Depending on the traffic of your server, you need to find your "sweet spot". I suggest to start with 50 to 100 ports. You can always add more if required.