[SOLVED] vsftp users can log in, but then can't ls or anything!

anon091 · 06-20-2013, 02:14 PM

I have an FTP server, where the users are able to log in, but then when they do a ls, they get a 425 Failed to establish connection after a short pause. Any ideas?

Dennis3 · 06-20-2013, 02:27 PM

FTP uses two ports:
1. 21
2. 20

Port 20 is used for DATA transfer. Please check that your firewall if any doesn't block it, furthermore, check that chroot_local_user markes as YES in /etc/vsftpd/vsftpd.conf

Let me know if it helped

Dennis.

anon091 · 06-20-2013, 02:34 PM

Actually, its weird, if I try to ftp from a command prompt, i get a "200 PORT command successful. Consider using PASV" then the 425. but if i connect with Filezilla, everything works.

I tried turning off iptables and still a no go. so it must be client related, although they've been using the same client all along, i wonder what changed

Dennis3 · 06-20-2013, 02:41 PM

Quote:

Originally Posted by rjo98

Actually, its weird, if I try to ftp from a command prompt, i get a "200 PORT command successful. Consider using PASV" then the 425. but if i connect with Filezilla, everything works.

I tried turning off iptables and still a no go. so it must be client related, although they've been using the same client all along, i wonder what changed

Not a while ago I had to set FileZilla server on one of the Windows Server 2012 machine and I had to change the Data transfer port to 20 instead of the random ports they supplied ( in the configuration ).

Dennis.

anon091 · 06-20-2013, 02:43 PM

I'm talking about the client though will connect to my vsftp server, but the windows command prompt ftp client is having the issue.

Z038 · 06-23-2013, 11:13 PM

Try passive mode, if the client supports it. In your vsftp, specify pasv_enable=yes, and a min and max port range. For example:

Code:

pasv_enable=YES
pasv_min_port=30000
pasv_max_port=30099

Then open up the pasv port range on your firewall.

anon091 · 06-24-2013, 08:31 AM

thanks

chrism01 · 06-25-2013, 12:56 AM

This is a good link about active vs passive; maybe a good background read http://slacksite.com/other/ftp.html

anon091 · 06-25-2013, 09:07 AM

Thanks everyone, I think I'm good for now on this, closing the thread.