Proftpd+SSL/TLS no folder listing

Hi there,
This problem is really getting on my nerves ;)


- ProFTPD Version 1.2.11rc1
- Mandrake 9.2

When I try to connect through TLS or SSL got the same problem :
In active mode :

Response: 220 ProFTPD 1.2.11rc1 Server (ProFTPD Default Installation) [192.168.0.4]
Command: AUTH TLS
Response: 234 AUTH TLS successful
Status: SSL connection established. Waiting for welcome message...
Command: PBSZ 0
Response: 200 PBSZ 0 successful
Command: PROT P
Response: 200 Protection set to Private
Command: USER bob
Response: 331 Password required for bob.
Command: PASS *******
Response: 230 Benvinguts a Trinquis Net
Command: FEAT
Response: 211-Features:
Response: MDTM
Response: REST STREAM
Response: SIZE
Response: AUTH TLS
Response: PBSZ
Response: PROT
Response: 211 End
Command: SYST
Response: 215 UNIX Type: L8
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/home" is current directory.
Command: PORT 127,0,0,1,16,214
Response: 500 Illegal PORT command
Error: Could not retrieve directory listing

In passive mode :

(...)
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/home" is current directory.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,4,141,78).
Command: TYPE A
Response: 200 Type set to A
Command: LIST
Error: Transfer channel can't be opened. Reason: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.


The strange port command for active mode is because i'm behind a proxy and have to make a few tricks to get through. But, tryied with direct connection, got same problem. Tryied with Filezilla and Flashfxp, same problem too. Last thing, without encryption works fine ! FTP/SSH2 works too ! But can't get this TLS or SSL working.
Any ideas ?

Thanks for any help.

I have kind of the same problem

i'm running proftpd 1.2.9 on debian woody
with few computers on a little home network with a hardware router/firewall (opened port 21/20)

when i connect proftpd on its internal hostname, there is no problem with or without ssl connection.
when i do the same with the outside hostname, its stil possible to connect to the server when i use ssl.
But can't list or change a directory.
cannot connect to a data port i think

----------------
227 Entering Passive Mode (192,168,168,5,250,43).
connecting data channel to 192.168.168.5:64043
Substituting connection address *.*.*.* for private address 192.168.168.5 from PASV
connection refused; the server would not accept an FTP connection.
PORT 192,168,168,4,11,156
500 Illegal PORT command
Port failed 500 Illegal PORT command
----------------
(*.*.*.*= my internet ip)

when i use "AllowForeignAddress on" in the proftpd.conf everything is working fine even with ssl connection
but i don't want to use this option.

I Have a @home cable connection, this problem started after my isp changed my IP.
Before, with my old ip, the ssl option worked fine on the inside and outside of my network
i checked everything if my old ip was still in any conf file or something
but i use mostly hostnames when possible in configs
I use ez-ipupdate on regular basis to update my ip to my external domain

does anyone know how to solve this problem?

I have a similar problem.

The workaround i've found is to connect using SFTP (ssl_sslv2=YES in vsftpd.conf file). The two other secure modes (ssl_sslv3 and ssl_tlsv1) don't work on my setup: i can connect but directory listing does not work.

My server is CentOS 5, vsftpd 2.0.5-10.el5

----- vsftpd.conf -----
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
chroot_local_user=YES
dirlist_enable=YES
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=NO
ssl_sslv2=YES
ssl_sslv3=NO
rsa_cert_file=/etc/webmin/miniserv.pem
----- eof -----

Any solution to get rid of this directory listing problem on TLS is very welcome !

I am struggling with this one at the moment. I am able to connect from certain linux servers but not others. I believe this is because some of the servers are behind a load-balancer / firewall and certain ports are being blocked, but I am not savvy enough to say for sure.