The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

FTP issue, No Directory Listing - in passive

Discussion in 'General Discussion' started by PDW, Nov 13, 2011.

  1. PDW

    PDW Well-Known Member

    Joined:
    Dec 29, 2003
    Messages:
    119
    Likes Received:
    0
    Trophy Points:
    16
    Hey guys, Ive been looking this up all morning - its a weird issue for me.
    Ive had pure-ftp working JUST fine all along and then today when I got on, or tried I got

    Error: Connection timed out
    Error: Failed to retrieve directory listing
    (This is using FileZilla) - I normally use Fireftp but using this, I can get you the error messages better.

    I get this using passive mode


    I also get warnings in SSH while logged in saying

    Message from syslogd@s1 at Nov 12 12:48:14 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.234.144.170 DST=98.232.80.67 LEN=77 TOS=0x10 PREC=0x00 TTL=64 ID=36033 DF PROTO=TCP SPT=21 DPT=52624 SEQ=4027470858 ACK=3918318604 WINDOW=91 RES=0x00 ACK PSH FIN URGP=0 OPT (0101080A1830EF9403D882340101050AE98CCC0BE98CCC0C)
    Ok, so Ive tried connecting with the firewall off - No firewall running on my PC or server / IPTables Off and still same issue

    Ive tried with pro-ftp same issue

    THEN - here is something that is different


    using Filezilla I followed some site instructions that said to go active ftp and Click on Connection -> FTP -> Active Mode: Select "Ask your operating system for the external IP address"

    IT works.

    Fireftp doesnt have the option to ask for an external IP, is that my problem?
    I cant even use my droid ftp to get in, no directory listings.

    So whats changed and different and any idea how to get back to just normal not having to change a bunch of settings for ftp operations?
     
  2. PDW

    PDW Well-Known Member

    Joined:
    Dec 29, 2003
    Messages:
    119
    Likes Received:
    0
    Trophy Points:
    16
    And to just update on this issue, Ive tried from different locations and same issue -
    issue started Nov 13th - because was working fine on the 12th.
     
  3. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,448
    Likes Received:
    194
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    I'm not sure I understand. Are you logging in as a cPanel user, root user, addon FTP account?
     
  4. PDW

    PDW Well-Known Member

    Joined:
    Dec 29, 2003
    Messages:
    119
    Likes Received:
    0
    Trophy Points:
    16
    Just a follow up, with help from Cpanel support -
    It ended up being the data center adding some new rules on their bridged firewall. Even though they denied doing anything at the first - we were able to prove and say yes it was on their end

    Infopro - it was any account just FYI - hense the non specific and general FTP issue. But its all solved.
     
  5. Jack Plissken

    Jack Plissken Member

    Joined:
    Mar 3, 2012
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hello , I have this issue too
    Sometimes FTP conection droped
    in syslog I see error
    Jul 3 11:35:53 duna kernel: nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=84.2.*.* DST=95.153.*.* LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=32134 DF PROTO=TCP SPT=21 DPT=2166 SEQ=2727385203 ACK=1114729642 WINDOW=15 RES=0x00 ACK PSH FIN URGP=0

    system
    ==============
    WHM 11.30.6 (build 6)
    CENTOS 6.2 x86_64 standard
     
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Do you have CSF installed?

    Code:
    whereis csf
    If so, whitelist your IP in CSF to prevent it dropping your FTP connection.
     
  7. Jack Plissken

    Jack Plissken Member

    Joined:
    Mar 3, 2012
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Ip is whitelisted in csf, bur ftp connections dropded and i see tris error in syslog.
     
  8. fcbinfo

    fcbinfo Well-Known Member

    Joined:
    Dec 10, 2006
    Messages:
    120
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Sorry about post in this old post, but i have the same problem.

    CSF Disabled, and when i try to connect to FTP, it shows "fail to get folders list", and im loged in my server on SSH with root password and SSH shows this message without i run any command:

    Message from syslogd@cpanel07 at Mar 7 13:54:47 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=11.111.111.111 DST=222.222.222.22 LEN=65 TOS=0x10 PREC=0x00 TTL=64 ID=26927 DF PROTO=TCP SPT=21 DPT=54256 SEQ=3507963128 ACK=875621256 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0 OPT (0101050A3430EB873430EB88)

    I have changed the ip addresses.

    Thanks if you can help.
     
  9. fcbinfo

    fcbinfo Well-Known Member

    Joined:
    Dec 10, 2006
    Messages:
    120
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    This post on cloudlinux solved my problem.

    Fixing passive FTP issue with SolusVM

    CloudLinux inside Xen on SolusVM installations often has an issue with Passive FTP. This is due to SolusVM adding following line to /etc/sysconfig/iptables-config:

    IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ipt_owner ipt_REDIRECT"

    This line is not needed by Xen (it is needed only for openvz), and instead you should use following line:


    IPTABLES_MODULES="ip_conntrack_netbios_ns"


    Restarting iptables after modifying this line will fix the issue with passive FTP.
     
Loading...

Share This Page