Help please while connecting through public IP

[SunnyLo]

If I try to connect through a public IP, it returns this error:

FileZilla Server 0.9.60 beta
Copyright 2001-2016 by Tim Kosse (tim.kosse@filezilla-project.org)
https://filezilla-project.org/
Connecting to server localhost:14147...
Connected, waiting for authentication
Logged on
Warning: FTP over TLS is not enabled, users cannot securely log in.
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> Connected on port 21, sending welcome message...
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> 220-FileZilla Server 0.9.60 beta
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> 220 Please visit https://filezilla-project.org/
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> CLNT https://ftptest.net on behalf of 112.118.187.50
(000019)1/2/2018 17:13:58 PM - (not logged in) (136.243.154.86)> 200 Don't care
(000019)1/2/2018 17:13:59 PM - (not logged in) (136.243.154.86)> USER Admin
(000019)1/2/2018 17:13:59 PM - (not logged in) (136.243.154.86)> 331 Password required for admin
(000019)1/2/2018 17:13:59 PM - (not logged in) (136.243.154.86)> PASS ********
(000019)1/2/2018 17:13:59 PM - admin (136.243.154.86)> 230 Logged on
(000019)1/2/2018 17:13:59 PM - admin (136.243.154.86)> SYST
(000019)1/2/2018 17:13:59 PM - admin (136.243.154.86)> 215 UNIX emulated by FileZilla
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> FEAT
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> 211-Features:
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> MDTM
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> REST STREAM
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> SIZE
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> MLST type*;size*;modify*;
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> MLSD
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> UTF8
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> CLNT
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> MFMT
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> EPSV
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> EPRT
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> 211 End
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> PWD
(000019)1/2/2018 17:14:00 PM - admin (136.243.154.86)> 257 "/" is current directory.
(000019)1/2/2018 17:14:01 PM - admin (136.243.154.86)> TYPE I
(000019)1/2/2018 17:14:01 PM - admin (136.243.154.86)> 200 Type set to I
(000019)1/2/2018 17:14:01 PM - admin (136.243.154.86)> PASV
(000019)1/2/2018 17:14:01 PM - admin (136.243.154.86)> 227 Entering Passive Mode (112,118,187,50,217,250)
(000019)1/2/2018 17:14:01 PM - admin (136.243.154.86)> MLSD
(000019)1/2/2018 17:14:12 PM - admin (136.243.154.86)> 425 Can't open data connection for transfer of "/"
(000019)1/2/2018 17:14:12 PM - admin (136.243.154.86)> disconnected.

Here is the setting of my server: https://use_direct_attachments_thankyou/a/2J1Th

[boco]

Did you follow the Network Configuration guide, yet?


The images posted are from the user settings. The user account itself works fine. What fails is the network/Passive setup.

[SunnyLo]

Passive mode settings + port forward list: https://use_direct_attachments_thankyou/a/dgp1V

[botg]

Why do you forward based on the source port number? FTP servers do not control which ports clients originate requests from.

[boco]

Remove the entries in "External source port number" in the port forwarding of the Passive range. The originating ports are totally random.

You do not have to (and actually should not) forward port 14147. It is used for remote administration and not necessary for client connections. While FileZilla Server prevents external connections to this port until you set up the proper bindings, forwarding that port could be disastrous, should a vulnerability in FZ Server ever arise. You know, shit happens, and if it does, there's always a fan nearby...

[SunnyLo]

14147 is for my mc server, not actually for anything else, I'll try removing the external port later, not at home.

[SunnyLo]

After changing my port forwarding to this setting, it's still not working. https://use_direct_attachments_thankyou/a/OzwpW

[botg]

You now have removed the external destination port number as well.

[SunnyLo]

Opps. Finally, I can connect through a public IP, the support is very GOOD. THANKS

[SunnyLo]

I have another problem, if I try to share my main computer drive, I cannot access it.
But if I share my desktop files, it will let me access it. What should I do?

[boco]

Please elaborate. Are you trying to share more than one resource simultaneously? Then, you need to use Aliases.

[SunnyLo]

User cannot list the files when I set my home Directory to "C:\" or "C:\Users\<UserName>"

[boco]

That should work as long as the local Windows SYSTEM account does have full access permissions to these resources. The FZ Server service runs as SYSTEM by default.

[SunnyLo]

Then what should I change to make it work?

https://use_direct_attachments_thankyou/a/QrPfw

[boco]

Not there, rather here:

c_properties.jpg (92.09 KiB) Viewed 14225 times