[solved] Can't get Server to work outside of the LAN

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
Cediwelli
500 Command not understood
Posts: 3
Joined: 2018-09-14 10:57
First name: Cedric
Location: Germany

[solved] Can't get Server to work outside of the LAN

#1 Post by Cediwelli » 2018-09-14 11:29

Hello dear Community,

so as the title already says: I can't get my FTP Server to work outside of my local network.

My achievements so far:

These are my settings for passive mode:
Image

All needed Ports are being forwarded in my Router's settings:
Image

FillZilla's output when I do the https://ftptest.net:

Code: Select all

(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> Connected on port 21, sending welcome message...
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 220-FileZilla Server 0.9.60 beta
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 220-Cedrics FTP
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 220 Please visit https://filezilla-project.org/
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> CLNT https://ftptest.net on behalf of 2003:dd:71d:e2d4:9913:9a81:9a30:95d0
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 200 Don't care
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> AUTH TLS
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 234 Using authentication type TLS
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> TLS connection established
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> USER guest
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> 331 Password required for guest
(000171)14.09.2018 13:10:53 - (not logged in) (136.243.154.86)> PASS *************
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> 230 Logged on
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> SYST
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> 215 UNIX emulated by FileZilla
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> FEAT
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> 211-Features:
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  MDTM
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  REST STREAM
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  SIZE
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  MLST type*;size*;modify*;
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  MLSD
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  AUTH SSL
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  AUTH TLS
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  PROT
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  PBSZ
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  UTF8
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  CLNT
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  MFMT
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  EPSV
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)>  EPRT
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> 211 End
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> PBSZ 0
(000171)14.09.2018 13:10:53 - guest (136.243.154.86)> 200 PBSZ=0
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> PROT P
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 200 Protection level set to P
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> PWD
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 257 "/" is current directory.
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> TYPE I
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 200 Type set to I
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> PASV
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 227 Entering Passive Mode (**,***,***,**,24,198)      //Censoring my IP Address
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> MLSD
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 150 Opening data channel for directory listing of "/"
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> TLS connection for data connection established
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> 226 Successfully transferred "/"
(000171)14.09.2018 13:10:54 - guest (136.243.154.86)> disconnected.
What https://ftptest.net outputs:

Code: Select all

Status: Resolving address of **.***.***.**

Status: Connecting to **.***.***.**

Warning: The entered address does not resolve to an IPv6 address.

Status: Connected, waiting for welcome message...

Reply: 220-FileZilla Server 0.9.60 beta

Reply: 220-Cedrics FTP

Reply: 220 Please visit https://filezilla-project.org/

Command: CLNT https://ftptest.net on behalf of 2003:dd:71d:e2d4:9913:9a81:9a30:95d0

Reply: 200 Don't care

Command: AUTH TLS

Reply: 234 Using authentication type TLS

Status: Performing TLS handshake...

Status: TLS handshake successful, verifying certificate...

Status: Received 1 certificates from server.

Status: cert[0]: subject='CN=***,C=DE,ST=****,L=***,EMAIL=****' issuer='CN=****,C=DE,ST=***,L=***,EMAIL=****'  //Censoring private stuff

Command: USER guest

Reply: 331 Password required for guest

Command: PASS *************

Reply: 230 Logged on

Command: SYST

Reply: 215 UNIX emulated by FileZilla

Command: FEAT

Reply: 211-Features:

Reply: MDTM

Reply: REST STREAM

Reply: SIZE

Reply: MLST type*;size*;modify*;

Reply: MLSD

Reply: AUTH SSL

Reply: AUTH TLS

Reply: PROT

Reply: PBSZ

Reply: UTF8

Reply: CLNT

Reply: MFMT

Reply: EPSV

Reply: EPRT

Reply: 211 End

Command: PBSZ 0

Reply: 200 PBSZ=0

Command: PROT P

Reply: 200 Protection level set to P

Command: PWD

Reply: 257 "/" is current directory.

Status: Current path is /

Command: TYPE I

Reply: 200 Type set to I

Command: PASV

Reply: 227 Entering Passive Mode (**,***,***,**,24,198)

Command: MLSD

Status: Data connection established, performing TLS handshake...

Status: TLS handshake successful, verifying certificate...

Status: Received 1 certificates from server.

Status: cert[0]: subject='CN=****,C=DE,ST=****,L=****,EMAIL=****' issuer='CN=****,C=DE,ST=****,L=****,EMAIL=****'      //Censoring the privat stuff again

Status: TLS session of transfer connection has been resumed.

Reply: 150 Opening data channel for directory listing of "/"

Listing: type=file;modify=20180914065859;size=7; affe.txt

Reply: 226 Successfully transferred "/"

Status: Success
And what its result is:
Your server is working and assorted routers/firewalls have been correctly configured for explicit FTP over TLS as performed by this test. However there have been warnings about compatibility issues, not all users will be able to use your server.

For maximum compatibility, consider resolving these warnings.
Well... everything looks like it should be working. But if I try to connect with any kind of Browser, this happens:

Image

It refuses connection and I don't know why.

I also tried it with Windows' ftp.exe:
Connecting with local IP Address works just fine.
With the WAN IP from my ISP, it doesn't.

I really hope anyone can afford any Ideas, I now tried for 4 hours and I am really tired...

Thanks in advance.
Last edited by Cediwelli on 2018-09-15 20:58, edited 2 times in total.

User avatar
boco
Contributor
Posts: 26910
Joined: 2006-05-01 03:28
Location: Germany

Re: Can't get Server to work outside of the LAN

#2 Post by boco » 2018-09-14 20:58

Please test on https://ftptest.net again, with the "Plain FTP" profile. Currently, you're comparing apples and oranges, as browsers do not support FTP over TLS at all.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

Cediwelli
500 Command not understood
Posts: 3
Joined: 2018-09-14 10:57
First name: Cedric
Location: Germany

Re: Can't get Server to work outside of the LAN

#3 Post by Cediwelli » 2018-09-15 09:43

boco wrote:
2018-09-14 20:58
Please test on https://ftptest.net again, with the "Plain FTP" profile. Currently, you're comparing apples and oranges, as browsers do not support FTP over TLS at all.
First, thank you for answering!

It's my bad... I forgot to mention that I tried "FTP over TSL" as well as "Plain FTP", same outcome (unfortunately).

User avatar
boco
Contributor
Posts: 26910
Joined: 2006-05-01 03:28
Location: Germany

Re: Can't get Server to work outside of the LAN

#4 Post by boco » 2018-09-15 20:15

If the test site tells you "success" in both FTP over TLS and Plain FTP, then the server is correctly configured to be reachable from the outside. The problems must be with the clients, then.

Please do all your tests from a machine that's truly outside your router. From your own network, the public IPv4 will most probably not work, as it is only valid to the outside of your router. Inside, the LAN IPv4 must be used.

Does not apply to IPv6, unless it is routed through the NAT as well.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

Cediwelli
500 Command not understood
Posts: 3
Joined: 2018-09-14 10:57
First name: Cedric
Location: Germany

Re: Can't get Server to work outside of the LAN

#5 Post by Cediwelli » 2018-09-15 20:57

Well... :lol:
That's pretty embarrassing... Yesterday it refused to work and now that I asked a friend of mine to check again, whether he can access the server or not, it worked just fine.
I should be happy... But now I am disappointed because it HAS to be my fault :lol:

Thank you very much for your time and support!

Post Reply