FTP - Connection timed out

[wisenerl]

Evening,

Need a little help with this one. See the snippit below. I have a customer who can't get logged into FTP on the server, keeps getting the Connection timed out error.

Passive ports are set on the pureftp config file, they are open in the firewall.

I can connect using Flashfxp just fine (She is also using Flashfxp). I never get any errors connecting to it, but they can't get in, they were able to login a couple of days ago though.

It's not I am getting an error code to work with either!

Any suggestion as to what it could be?

R] USER **********
[R] 331 User ******* OK. Password required
[R] PASS (hidden)
[R] 230 OK. Current restricted directory is /
[R] SYST
[R] 215 UNIX Type: L8
[R] FEAT
[R] 211-Extensions supported:
[R] EPRT
[R] IDLE
[R] MDTM
[R] SIZE
[R] MFMT
[R] REST STREAM
[R] MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
[R] MLSD
[R] AUTH TLS
[R] PBSZ
[R] PROT
[R] ESTA
[R] PASV
[R] EPSV
[R] SPSV
[R] ESTP
[R] 211 End.
[R] PWD
[R] 257 "/" is your current location
[R] PASV
[R] 227 Entering Passive Mode (198********,209)
[R] Opening data connection IP: 198******* PORT: 46801
[R] Data Socket Error: Connection timed out
[R] List Error

 

[PlotHost]

Maybe she has a firewall/antivirus that blocks somehow the connection.

 

[Hostprofil]

Hello, welcome and I problem with this error below:

Command:	PASV
Response:	227 Entering Passive Mode (188,240,231,188,142,41).
Command:	MLSD

 

[cPanelMichael]

Hello, welcome and I problem with this error below:

Command:	PASV
Response:	227 Entering Passive Mode (188,240,231,188,142,41).
Command:	MLSD

It's likely you have firewall rules enabled that are blocking the passive FTP ports that are configured in:

/etc/pure-ftpd.conf

Check to ensure the following line is not disabled in the above file:

PassivePortRange 30000 35000

Then, ensure the above port range is not blocked in your firewall.

Thank you.

 

[Hostprofil]

Hy, we next line:

# Port range for passive connections replies. - for firewalling.

PassivePortRange          30000 50000

Also does not connect, I get the same error

 

[cPanelMichael]

Did you ensure that port range is not blocked in your firewall? Are you using a third-party firewall such as CSF?

Thank you.

 

[Hostprofil]

Not that I know use another firewall, how to check this please? Thank you.

 

[cPanelMichael]

Not that I know use another firewall, how to check this please? Thank you.

Which firewall do you use? Have you tried disabling it temporarily to see if that resolves the issue? Please provide as many details as possible in your replies so we can assist you.

Thank you.

 

[Hostprofil]

I used these commands and it`s work but can not access subdirectories.Is any danger for my server so leave them or put them back? Thanks

chkconfig iptables off
service iptables save
service iptables stop

 

[cPanelMichael]

That disables your firewall completely. You are welcome to use that method to resolve the issue if you prefer not to have any firewall rules enabled. It's odd that the issue still persists with subdirectories. Do you get the same error message?

Thank you.

 

[Hostprofil]

the problem persists only for subdirectories. aditionnaly i can't delete something from them if i want to. how can i make them work with the firewall active?

 

[cPanelMichael]

the problem persists only for subdirectories. aditionnaly i can't delete something from them if i want to. how can i make them work with the firewall active?

That sounds like it may be an issue with your FTP client. Try using a different FTP client to see if you experience the same results. You may want to install a third-party firewall such as CSF if you are not comfortable manually modifying your iptables firewall rules:

ConfigServer Firewall

Thank you.