Require login with FTPS (tls) for all FTP login/transfer.


Apr 2, 2011
Hi, I have tried many hours to resolve this problem. Read and tested most of available documentation and forum topics without any luck/answer. Like these two:
- Creating SFTP

I try to login using only FTPS on my server with user created within cPanel "FTP accounts".
I have in "Service Configuration > FTP server configuration" required TLS for command/data.
Because I want and need everything on my server to transfer safely.

When i try to connect with FTP(E)S (explicit) i get login successful, and timeout on reading directory (log at bottom).

I have also tried to use implicit, but havn't done anything to activate listning on port 990. So that will be a dead run.

explicit FTP over TLS:

Status:    Resolving address of [subdomain].[domain].no
Status:    Connecting to
Status:    Connection established, waiting for welcome message...
Status:    Initializing TLS...
Status:    Verifying certificate...
Status:    TLS connection established.
Status:    Connected
Status:    Retrieving directory listing...
Command:    PWD
Response:    257 "/" is your current location
Command:    TYPE I
Response:    200 TYPE is now 8-bit binary
Command:    PASV
Response:    227 Entering Passive Mode (xx,xxx,xx,xxx,62,22)
Command:    MLSD
Error:    Connection timed out after 20 seconds of inactivity
Error:    Failed to retrieve directory listing
I would really appricate if anyone could help me out :)
Last edited by a moderator:

RWH Tech

Well-Known Member
Oct 1, 2015
cPanel Access Level
Root Administrator
I had a similar issue with CoreFTP as the client and had to turn on "Broken Clients Compatibility" in the FTP options.

I also had to configure the passive ports in the FTP conf, and allow the ports through CSF.

RWH Tech

Well-Known Member
Oct 1, 2015
cPanel Access Level
Root Administrator
@RWH Tech,
Go through the below link, you will get solve your issue.

My issue was taken care of by the steps I mentioned in my reply, but I appreciate the tip.
The HOWTO page looks good, but you might want to add the "Broken Clients Compatibility" part onto it, which is what I had to do to get CoreFTP going. I know CuteFTP didn't need it, don't know what other clients break without it.