Updated To Version 3.10.0 Now Receiving Errors

[botg]

Error: Server returned unroutable private IP address in PASV reply
Make sure the server is configured to allow passive mode connections.
If the server is behind a NAT router, make sure the server knows its external IP address.
The range of ports used for passive mode must be opened in all involved firewalls.
The range of ports used for passive mode must be forwarded by all involved NAT routers.
Try uninstalling all firewalls and plug your computer directly into your modem, thus bypassing the router.

Did you do what the test suggests you to do?

[TN-Notebooks]

Hallo

thanks for your response.
My Router is a AVM Fritzbox 7390

From that Points i disabled Firewall an Virus scan. No Help

I thought that the Settings of the Server 2008R2 are configured for passive Mode because all other FTP Clients are working and only FileZilla is affected.

My Knmowledge for this Stuff is not good enough. So i have to go on reading or find someone who can check that Settings.
I found a stetting in the ILS Manager Firewallsupport ? For the Data Port that is set to 0-0 and the IP Setting for External Firewall is empty
I think there i have to open Ports there , but it aditional the sys want a Ip from External Firewall and i dont know which IP they want at that Position
That Port i think i aditional have to open in the Router ?

Sorry but i am a Rooky in that Stuff and have to learn a lot

Tom

[botg]

I thought that the Settings of the Server 2008R2 are configured for passive Mode because all other FTP Clients are working and only FileZilla is affected.

Other clients are insecure, they don't use encryption by default. When using plaintext FTP, your firewall or NAT router taints the FTP traffic and replaces commands and replies so that even though the server configuration is all wrong, the connection still automagically works. Obviously, using encryption prevents this sabotage and enforces proper configuration.

See https://wiki.filezilla-project.org/Netw ... a_sabotage for a more detailed explanation.

I found a stetting in the ILS Manager Firewallsupport ? For the Data Port that is set to 0-0 and the IP Setting for External Firewall is empty
I think there i have to open Ports there
That Port i think i aditional have to open in the Router ?[/

Yes, you need to chose a range of ports (say a thousand ports) and forward that range in your router. If you do not chose a range, you need to forward all ports.

it aditional the sys want a Ip from External Firewall and i dont know which IP they want at that Position

Status: Auflösen der IP-Adresse für tn-notebooks.webhop.me
Status: Verbinde mit 79.254.3.208:21...

This looks like the server's IP address.

[uic88tz]

This is very frustrating!! I am not familiar with any of this stuff I had no problem updating my church's website before this update. I was even excited that I learned enough code that I could change it through notepad instead of dreamweaver, now this happens. I went under my Control Panel; opened Windows Firewall; turn windows firewall on or off....turned Off; what other firewall is there? Is there a chat room or another way I can contact FileZilla with my problem? I have past events on the home page that I really want to change, but can't get logged into.

[naquashv]

please check this image

[botg]

@naquashv: Everything looks in perfect order. Congratulations on this fine screenshot.

[custsrvcrep]

I wanted to share my experience in making this work (yes, WORKAROUND) so that I could get some work done today. I will also draft a full support request to my server.

I upgrade to the latest FTP (3.12.0.2). As soon as I did, I was unable to access any of my sites. I received the same message as most in this thread ...

500 I won't open a connection to 192.168.1.104 (only to x.x.x.x)
Failed to retrieve directory listing

As a workaround, I tried to use the "ENCRYPTION: Only use plain FTP (insecure)". But it didn't work. No matter what setting I made, I was not able to get access.

My server works only with Active connections, so I felt that might be part of the issue. At stackoverflow, I found this post:

This is a private IP address. The server cannot connect to that one. So this definitely does not work for servers on the Internet. If you have to use active mode, you need to open your firewall/router to forward incoming FTP connections to your computer.

That is when I was reminded that I was forced to change to a ISP-provided [CHINESE JUNK] router. I went in to the settings of the router and setup a forwarding of ftp traffic to my computer and the workaround ftp (insecure) allowed me to access my sites.

[boco]

You should tell FileZilla your external IP address, too.

[rogthehero]

I was able to upload changes on my web site one minute then not the next.
I got a 530 error message

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 22:10. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
.
USER rogthehero
331 User rogthehero OK. Password required
.
PASS ****
530 Login authentication failed
.
QUIT
221-Goodbye. You uploaded 0 and d

I re-entered the password, even changed it but still can't upload. properly and when I tried the fist few times I tried all the pages and as I did each one lost some of the info, it was the web plus photo galleries. I think I'm going mad please help.

[GetsuaTenshu]

I found that if you can successfully make the TLS connection you can try "active connection" instead of passive.
Which is fine if the connection is secure with TLS then Active/Passive really makes no difference.

[botg]

I found that if you can successfully make the TLS connection you can try "active connection" instead of passive.
Which is fine if the connection is secure with TLS then Active/Passive really makes no difference.

So if it does not make a difference, why does one work and the other doesn't?


Active/passive and TLS are orthogonal concepts, they don't influence each other in the slightest.

[noface0711]

If these hosts use strong security, why is doesn't secure FTP over TLS work with those hosts? Instead they force their users to use insecure FTP.

[NJaf]

If you using vsftpd then add the line

ssl_ciphers=AES128-SHA

in the vsftpd.conf file

[botg]

Bad advise, it limits it to a single, rather insecure cipher.

Add ssl_ciphers=HIGH instead.

[noface0711]

I have no control over how a hosting company configures their servers. That being said is there a way to change your default to use plain FTP