Proftpd disconnects
 

Okay, I have scoured here and several other forums so I will ask here...

Running Proftpd on MDK 10 Official, I used their default proftp.conf file and set up a user for FTP transfers.

Now what I get is this:

Trying xxx-xxx-xxx-xx.xx-x.x-xxxx.xxx.xx.xxxxx.xxx.xx:28
Connected to xxxxxx.xxx.xxx:28
220 xxx-xxx-xxx-xx.xx-x.x-xxxx.xxx.xx.xxxxx.xxx.xx FTP server ready
USER wacko
331 Password required for wacko.
PASS xxxx
230 -- Guest access granted for wacko --
SYST
215 UNIX Type: L8
TYPE I
200 Type set to I
PWD
257 "/" is current directory.
PASV
227 Entering Passive Mode (xxx,xxx,xxx,xx,xx,xxx).
Cannot create a data connection: Connection refused
Disconnecting from site xxxxxxx.xxxxx.xxx

I know it's something simple, but it's aluding me right now... Any suggestions?

This is what I have found out so far:

2.2. When gFTP tries to get the remote directory listing, I receive the error: Cannot create a data connection: Connection refused Go under FTP->Options->FTP and turn off passive file transfers. Instead of sending the PASV command to open up the data connection on the server side, the data connection will be opened up on the client side, and the PORT command will be sent to the server instead.

Now the problem is this:

425 Unable to build data connection: Connection refused

Hmmmm....

Yeah it sounds like the initial negociation is working but the actual FTP data ports are locked up tight.

The thing is where?

Your Linux box?

Your Firewall?

I have one box as the "Router/FTp server" running Shorewall.

Trying to connect to it with gftp

On the server temporarily shut down Shorewall.

e.g.

service shorewall stop

Then see if you can connect.

If so you'll need to open the FTP-DATA port in shorewall.

You were close !

What I did to the router was issue shorewall a clear command and I was able to connect and stay connected.

I do have ACCEPT 22,28 ports.

hmmm....

Weird, I dissconnected and tried to reconnect and got the original error... ugh!

hmmm... I restarted Shorewall, then sent it the CLEAR command and I'm able to connect....

Eh, don't you want 21 which is FTP and 20 which is FTP-DATA?