Server listens only localhost

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Server listens only localhost

#1 Post by dam034 » 2019-02-08 16:52

Dear users,

I installed FZ server on my pc.

If I try to access by the same machine typing ftp://localhost, I can access.
If I try in another LAN machine typing ftp://mypc-ip, I can't connect, in fact in the log I can see anything.

How can I fix this issue?

Thanks

User avatar
botg
Site Admin
Posts: 32477
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Server listens only localhost

#2 Post by botg » 2019-02-08 18:01

A firewall blocking the access most likely.

dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Re: Server listens only localhost

#3 Post by dam034 » 2019-02-10 14:45

I have disabled Windows Defender Firewall, but the result is the same.

I can post here the xml config file if you want to see it, in case there is some mistake there.

Help!

User avatar
boco
Contributor
Posts: 24799
Joined: 2006-05-01 03:28
Location: Germany

Re: Server listens only localhost

#4 Post by boco » 2019-02-10 15:11

If you didn't change anything on the "IP bindings" and/or "IP filters" page, then posting the config file is not necessary. Did you?
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Re: Server listens only localhost

#5 Post by dam034 » 2019-02-10 15:59

When I installed FZ server 0.9.60 on the machine, I have overwritten the default xml config file, with this below, coming from an old configuration in FZ server 0.9.41:

Code: Select all

<FileZillaServer>
    <Groups />
    <Users>
    <User Name="anonymous">
            <Option Name="Pass" />
            <Option Name="Salt" />
            <Option Name="Group" />
            <Option Name="Bypass server userlimit">1</Option>
            <Option Name="User Limit">100</Option>
            <Option Name="IP Limit">1</Option>
            <Option Name="Enabled">0</Option>
            <Option Name="Comments" />
            <Option Name="ForceSsl">0</Option>
            <IpFilter>
                <Disallowed />
                <Allowed />
            </IpFilter>
            <Permissions>
                <Permission Dir="C:\Server\FTP">
                    <Option Name="FileRead">1</Option>
                    <Option Name="FileWrite">0</Option>
                    <Option Name="FileDelete">0</Option>
                    <Option Name="FileAppend">0</Option>
                    <Option Name="DirCreate">0</Option>
                    <Option Name="DirDelete">0</Option>
                    <Option Name="DirList">1</Option>
                    <Option Name="DirSubdirs">1</Option>
                    <Option Name="IsHome">1</Option>
                    <Option Name="AutoCreate">0</Option>
                </Permission>
            </Permissions>
            <SpeedLimits DlType="2" DlLimit="20" ServerDlLimitBypass="0" UlType="2" UlLimit="20" ServerUlLimitBypass="0">
                <Download />
                <Upload />
            </SpeedLimits>
        </User>
    </Users>
    <Settings>
        <Item name="Serverports" type="string">21</Item>
        <Item name="Number of Threads" type="numeric">2</Item>
        <Item name="Maximum user count" type="numeric">0</Item>
        <Item name="Timeout" type="numeric">120</Item>
        <Item name="No Transfer Timeout" type="numeric">600</Item>
        <Item name="Check data connection IP" type="numeric">2</Item>
        <Item name="Service name" type="string"></Item>
        <Item name="Service display name" type="string"></Item>
        <Item name="Force TLS session resumption" type="numeric">1</Item>
        <Item name="Login Timeout" type="numeric">60</Item>
        <Item name="Show Pass in Log" type="numeric">0</Item>
        <Item name="Custom PASV IP type" type="numeric">0</Item>
        <Item name="Custom PASV IP" type="string"></Item>
        <Item name="Custom PASV min port" type="numeric">0</Item>
        <Item name="Custom PASV max port" type="numeric">0</Item>
        <Item name="Initial Welcome Message" type="string">Malvenuto</Item>
        <Item name="Admin port" type="numeric">14147</Item>
        <Item name="Admin Password" type="string"></Item>
        <Item name="Admin IP Bindings" type="string"></Item>
        <Item name="Admin IP Addresses" type="string"></Item>
        <Item name="Enable logging" type="numeric">1</Item>
        <Item name="Logsize limit" type="numeric">0</Item>
        <Item name="Logfile type" type="numeric">1</Item>
        <Item name="Logfile delete time" type="numeric">0</Item>
        <Item name="Disable IPv6" type="numeric">0</Item>
        <Item name="Enable HASH" type="numeric">0</Item>
        <Item name="Download Speedlimit Type" type="numeric">0</Item>
        <Item name="Upload Speedlimit Type" type="numeric">0</Item>
        <Item name="Download Speedlimit" type="numeric">10</Item>
        <Item name="Upload Speedlimit" type="numeric">10</Item>
        <Item name="Buffer Size" type="numeric">32768</Item>
        <Item name="Custom PASV IP server" type="string">http://ip.filezilla-project.org/ip.php</Item>
        <Item name="Use custom PASV ports" type="numeric">0</Item>
        <Item name="Mode Z Use" type="numeric">0</Item>
        <Item name="Mode Z min level" type="numeric">1</Item>
        <Item name="Mode Z max level" type="numeric">9</Item>
        <Item name="Mode Z allow local" type="numeric">0</Item>
        <Item name="Mode Z disallowed IPs" type="string"></Item>
        <Item name="IP Bindings" type="string">*</Item>
        <Item name="IP Filter Allowed" type="string"></Item>
        <Item name="IP Filter Disallowed" type="string"></Item>
        <Item name="Hide Welcome Message" type="numeric">0</Item>
        <Item name="Enable SSL" type="numeric">0</Item>
        <Item name="Allow explicit SSL" type="numeric">1</Item>
        <Item name="SSL Key file" type="string"></Item>
        <Item name="SSL Certificate file" type="string"></Item>
        <Item name="Implicit SSL ports" type="string">990</Item>
        <Item name="Force explicit SSL" type="numeric">0</Item>
        <Item name="Network Buffer Size" type="numeric">262144</Item>
        <Item name="Force PROT P" type="numeric">1</Item>
        <Item name="SSL Key Password" type="string"></Item>
        <Item name="Allow shared write" type="numeric">0</Item>
        <Item name="No External IP On Local" type="numeric">1</Item>
        <Item name="Active ignore local" type="numeric">1</Item>
        <Item name="Autoban enable" type="numeric">0</Item>
        <Item name="Autoban attempts" type="numeric">10</Item>
        <Item name="Autoban type" type="numeric">0</Item>
        <Item name="Autoban time" type="numeric">1</Item>
        <Item name="Minimum TLS version" type="numeric">0</Item>
        <SpeedLimits>
            <Download />
            <Upload />
        </SpeedLimits>
    </Settings>
</FileZillaServer>
There are many others <User> in the configuration, but I don't think the <User> elements can block external connections.

Help!

User avatar
botg
Site Admin
Posts: 32477
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Server listens only localhost

#6 Post by botg » 2019-02-11 06:43

Config seems fine.

dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Re: Server listens only localhost

#7 Post by dam034 » 2019-02-11 08:30

Now I have rebooted the computer and now the FTP server is listening from LAN and WAN.

But I have another problem: the FTP commands work but the transfer not. If I want to transfer the directory list or a file, it doesn't work. These are the logs on the server:

Code: Select all

(000009)11/02/2019 09:24:27 - (not logged in) (192.168.1.25)> 220 Malvenuto
(000009)11/02/2019 09:24:27 - (not logged in) (192.168.1.25)> USER anonymous
(000009)11/02/2019 09:24:27 - (not logged in) (192.168.1.25)> 331 Password required for anonymous
(000009)11/02/2019 09:24:27 - (not logged in) (192.168.1.25)> PASS *********
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> 230 Logged on
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> FEAT
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> 211-Features:
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  MDTM
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  REST STREAM
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  SIZE
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  MLST type*;size*;modify*;
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  MLSD
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  UTF8
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  CLNT
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  MFMT
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  EPSV
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)>  EPRT
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> 211 End
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> CLNT AndFTP
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> 200 Don't care
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> PWD
(000009)11/02/2019 09:24:27 - anonymous (192.168.1.25)> 257 "/" is current directory.
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> NOOP
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> 200 OK
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> CWD /
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> 250 CWD successful. "/" is current directory.
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> FEAT
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> 211-Features:
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  MDTM
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  REST STREAM
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  SIZE
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  MLST type*;size*;modify*;
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  MLSD
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  UTF8
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  CLNT
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  MFMT
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  EPSV
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)>  EPRT
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> 211 End
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> PASV
(000009)11/02/2019 09:24:28 - anonymous (192.168.1.25)> 227 Entering Passive Mode (192,168,1,10,216,226)
And here the connection stops, it can't transfer the directory listing.

How can I fix?

Thanks

User avatar
boco
Contributor
Posts: 24799
Joined: 2006-05-01 03:28
Location: Germany

Re: Server listens only localhost

#8 Post by boco » 2019-02-11 09:26

You need to configure the server and your network according to the Network Configuration Guide. Definition of a Passive port range, port forwarding that range through the router, opening that range in the firewalls. Additionally, teaching FileZilla Server your public IPv4.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Re: Server listens only localhost

#9 Post by dam034 » 2019-02-11 16:07

If I pass the name of the executable FZ server to the firewall on the machine, in the NAT router I have to forward only the port 21 TCP?

Thanks

User avatar
boco
Contributor
Posts: 24799
Joined: 2006-05-01 03:28
Location: Germany

Re: Server listens only localhost

#10 Post by boco » 2019-02-11 17:25

No! The listening port (21 and possibly 990) and the complete Passive port range must be forwarded and opened. Listings and transfers do not use port 21.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

dam034
504 Command not implemented
Posts: 6
Joined: 2019-02-08 16:48

Re: Server listens only localhost

#11 Post by dam034 » 2019-02-11 17:55

So I set a small range of ports for passive mode (50000-50500) and forwarded them.

Now from ftptest.net it works!

Thanks for the help!

Post Reply