FTP connection error via filezilla

twg

hello can anyone help me
I have this ftp folder error
State: The server sent a passive response with a non-routable address. Using the server address as an alternative.
Command: MLSD

johnpoz

@twg is some server out on the internet, is your server behind pfsense?

This really isn't a pfsense issue.. The ftp server should be setup to send its public IP..

If your using filezilla as a client you could set this..

if you are setting up a server, you need to set the public IP for passive mode.. Should of asked you this when ran through the wizard

or set here.. where I have 1.2.3.4 that would be your actual public IP.

If this server is one your running behind pfsense, and outside users are wanting to connect using passive you would also want to set a specific passive port range and then forward that on pfsense to the ftpservers rfc1918 address.

twg

Hi, thanks for your help, but it's still giving me an error:
Command: MLSD
Error: Connection timed out after 20 seconds of inactivity
Error: Failed to get folder list

johnpoz

@twg and again where is the server, where is the client?? Is it your server?

Is its still sending bad passive? And you tried to override that with that filezilla client setting?

BTW: why anyone still uses ftp is beyond me.. If this was sftp, which is only using the single port 22, then you wouldn't have the issue of nat and control channel and data channel or passive vs active..

Is this server managed by you and outside pfsense on the internet, or you are hosting it behind pfsense - and your client is out on the internet? or is it some server out on the internet managed by someone else?

twg

Hello
email server is on my server within my network pfsense is used to manage the links and the firewall is just not running ftp other services are ok

johnpoz

@twg

Where are you trying to ftp from?? Where is the client?

So this server is on say 192.168.0.100 behind pfsense.. And you out on the internet want to ftp to it..

So you forwarded 21 to your ProFTPD Server (ProFTPD) [192.168.0.122] on pfsense.. Did you forward the passive ports? You setup in proftpd to use?

Did you setup proftpd to send your correct public IP?

I connected to the IP you use to connect to the forums so I could see if ftp even answered.

For passive to work, you also have to forward the ports the server will use for its passive ports.. I can not get logged into see what it sends, If you PM me an account that would work I could see what its sending for the port, or try active where it would connect to my client.

Is your server a plesk?

https://www.plesk.com/kb/support/how-to-configure-the-passive-ports-range-for-proftpd-on-a-plesk-server-behind-a-firewall/

It defaults to a really large passive range 49152-65535 , I would for sure change that to something more like 100 ports or even just 10 if you don't have lots of clients at the same time.. Then you need to forward those ports on pfsense to I assume 192.168.0.122, without the passive ports being forwarded then no the data channel will never work when the client uses passive mode. Even if you told the client to use the IP you connected to when the server sends rfc1918 IP.