Internet Connection Sharing / Hanging at 211-Features:

[cyberjock045]

I did a search on "Internet Connection Sharing" an didn't come up with much help on this issue. I have no problem connecting to my Filzilla FTP Server when I am "directly" connected to the internet. Here at home, I have one Vista computer that is "directly" connected to the internet and is sharing the internet with the rest of my computers using "Internet Connection Sharing". The Vista computer that is "directly" connected has no problems connecting to the FTP Server, but none of the other computers will. I have disabled Windows Firewall on all computers and have no other firewalls connected. My Filezilla FTP Server is also running on a computer that is "directly" connected to the internet and the Windows Firewall is off on it as well. At this point I am not sure if the issue is Client side or Server side so I will list the log on both. I thank you for any help you can give wit this issue. If this is an issue that has been resolved in a prior post, I apologize for not being able to find it.

Client Side:

Status: Connection established, waiting for welcome message...
Response: 220-FileZilla Server version 0.9.27 beta
Response: 220-written by Tim Kosse (Tim.Kosse@gmx.de)
Response: 220 Please visit http://sourceforge.net/projects/filezilla/
Command: USER cyberjock045
Response: 331 Password required for cyberjock045
Command: PASS ***********
Response: 230 Logged on
Command: SYST
Response: 215 UNIX emulated by FileZilla
Command: FEAT
Response: 211-Features:
Error: Connection timed out
Error: Could not connect to server
Status: Waiting to retry...
(Loops again at this point)


Server Side:

(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> Connected, sending welcome message...
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> 220-FileZilla Server version 0.9.27 beta
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> 220 Please visit http://sourceforge.net/projects/filezilla/
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> USER cyberjock045
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> 331 Password required for cyberjock045
(000016) 10/11/2008 0:38:07 AM - (not logged in) (76.185.226.67)> PASS ***********
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> 230 Logged on
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> FEAT
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> 211-Features:
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> MDTM
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> REST STREAM
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> SIZE
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> MLST type*;size*;modify*;
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> MLSD
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> UTF8
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> CLNT
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> MFMT
(000016) 10/11/2008 0:38:07 AM - cyberjock045 (76.185.226.67)> 211 End
(000016) 10/11/2008 0:38:28 AM - cyberjock045 (76.185.226.67)> disconnected.
(Loops again at this point)




Thanks,
Joe

[botg]

Ask your ISP for a second IP address and then get a simple switch. Then both your computers can access the internet independently.

[cyberjock045]

Thank you for the suggestion, but that does not resolve this issue. I am not willing to pay for an extra fee every month, just to be able to access the FTP from other computers here, and it would be really expensive. I have 7 computers here and last I looked, my ISP charges an extra $10 per computer that you want to connect. So an extra $60/month just to be able to access the FTP? Not worth it. Additionally, I am actually trying to learn more about FTP and HTTP servers and how the protocols work... and this would just be defeating the purpose.


Thanks,
Joe

[Stefan1200]

Maybe I do not understand the problem exactly, but why you are not using the LAN ip address?

[cyberjock045]

I'll explain in more detail. I should have done a better job of explaining the issue, I apologize.

I have a computer at work that is running Filezilla FTP Server and it is directly connected to the internet (no routers or firewalls). I call this my "FTP Server at Work".

I have several computers at home. Only one of them is directly connected to the internet and is running Windows Internet Connection Sharing (no routers or firewalls). I will call this my "Internet Sharing Computer". All of the rest of my computers at home are on a LAN with the "Internet Sharing Computer" and they able to connect to the internet though the "Internet Sharing Computer".

The "Internet Sharing Computer" can connect my "FTP Server at Work" with no problems (using Filezilla FTP Client). But none of the other computers at home can connect to my "FTP Server at Work".

So, If I am on a computer that is directly connected to the internet I have no problems connecting to the "FTP Server at Work". If I am on a computer that is not directly connected to the internet, and it is getting it's internet connection though a computer using Windows Internet Connection Sharing, I can not connect to the "FTP Server at Work".

I have included a network map of what I'm talking about below.




I hope this makes easier to understand what issue I am having. Thanks for any help you can give.

-Joe

[botg]

It is a well known fact, that the Application Layer Gateway Service (ALG.exe) of Windows actively sabotages FTP connections. You'd need a proper, dedicated NAT router that does not sabotage FTP connections with properly configured port forwardings.

[cyberjock045]

BAH!... Well... that's Microsoft with all their infinite knowledge i suppose. Thanks for clearing that up for me.

[Richardkl]

I have the same problem, but it only happpens with the fileZile server as with other FTP servers it works fine. SO it must be the Filezilla server issue see below for the log that works and after that the filezila that doesn't so help with the file zillaserver

Status: Connecting to xxxxxxxxxxxxxx:21...
Status: Connection established, waiting for welcome message...
Response: 220---------- Welcome to Pure-FTPd [TLS] ----------
Response: 220-You are user number 2 of 50 allowed.
Response: 220-Local time is now 01:08. Server port: 21.
Response: 220-IPv6 connections are also welcome on this server.
Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: USER Richard@xxxxxxxxxxxxxxxxxx
Response: 331 User Richard@xxxxxxxxxxxxxxxxxxx OK. Password required
Command: PASS *********
Response: 230-User Richard@xxxxxxxxxxxxxxxxxxxx has group access to: xxxxxxxxx
Response: 230 OK. Current restricted directory is /
Command: SYST
Response: 215 UNIX Type: L8
Command: FEAT
Response: 211-Extensions supported:
Response: EPRT
Response: IDLE
Response: MDTM
Response: SIZE
Response: REST STREAM
Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response: MLSD
Response: ESTP
Response: PASV
Response: EPSV
Response: SPSV
Response: ESTA
Response: AUTH TLS
Response: PBSZ
Response: PROT
Response: 211 End.
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is your current location
Command: TYPE I
Response: 200 TYPE is now 8-bit binary
Command: PASV
Response: 227 Entering Passive Mode (xxxxxxxxx,84,28)
Command: MLSD
Response: 150 Accepted data connection
Response: 226-ASCII
Response: 226-Options: -a -l
Response: 226 20 matches total
Status: Directory listing successful


filezilla server fails

Status: Connecting to xxxxxxxxxxxxxxxxxxxx:21...
Status: Connection established, waiting for welcome message...
Response: 220 Hello from xxxxxxxxxxxxxxxxxxx FTP site
Command: USER richard
Response: 331 Password required for richard
Command: PASS *********
Response: 230 Logged on
Command: SYST
Response: 215 UNIX emulated by FileZilla
Command: FEAT
Response: 211-Features:

[botg]

Most likely there's just something in the FEAT response which your firewall/router does not understand so that it closes the connection. Nonetheless the output of the FEAT command of FileZilla Server is standards compliant, so not a problem in FZS.

[Richardkl]

Ok. it it is the firewall, please give me a clue what to look for in the firewall settings. I also DMZ'ed the server and that changed nothing.

Thanks

[Richardkl]

Here is an update to the orginal problem reported by "cyberjock045" I have been able to duplicate it and it is only if you are using VISTA ics. Also this only occurs when connecting to a filezilla server as I am able to connect to servers that are hosted by "ProFTPD 1.3.2e Server"

Even if I get the wizzard to pass (see below) the system still will not connect to filezilla server windows 2000 server sp4. I have two servers and I can't get to either. I also tested smartFTP client and it shows the same results. Remember, it all works find on the main vista computer, the one that is sharing the connection.

Here are also the results of the wizzard

you must first select "get external address from url " or it will fail

Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.3.2.1
Response: 230 logged on.
Checking for correct external IP address
Retrieving external IP address from http://ip.filezilla-project.org/ip.php
Checking for correct external IP address
IP 69.1.35.238 gj-b-df-cdi
Response: 200 OK
PREP 54796
Response: 200 Using port 54796, data token 1463060662
PORT 69,1,35,238,214,12
Connection lost
Connection closed

wizzard resukts with get address from server

Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.3.2.1
Response: 230 logged on.
Checking for correct external IP address
IP 192.168.0.12 bjc-bgi-a-bc
Response: 510 Mismatch. Your IP is 69.1.35.238, gj-b-df-cdi
Wrong external IP address
Connection closed

[Richardkl]

SOLVED?

I was able to get it to work by changing the public port on the router from 20 to port 8891 and 21 to port 8892, JUST the public port on the router so that the internal net is not affected.

All work fine ! I guess that the problem is in the ICS can't deal with the routing of the ports 20 and 21

long live work arounds!

I still think that FZ client/server is doing something funny as other clients/server ftp solutions work going through ICS, see post dated 2010-01-07 00:12.

[boco]

Code: Select all

09:06:07	Command:	FEAT
09:06:07	Response:	211-Features:
09:06:07	Response:	 MDTM
09:06:07	Response:	 REST STREAM
09:06:07	Response:	 SIZE
09:06:07	Response:	 MLST type*;size*;modify*;
09:06:07	Response:	 MLSD
09:06:07	Response:	 AUTH SSL
09:06:07	Response:	 AUTH TLS
09:06:07	Response:	 PROT
09:06:07	Response:	 PBSZ
09:06:07	Response:	 UTF8
09:06:07	Response:	 CLNT
09:06:07	Response:	 MFMT
09:06:07	Response:	211 End

Probably it stops because of the UTF8.