Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    remote ftp ssl access failed

    Scheduled Pinned Locked Moved Firewalling
    59 Posts 4 Posters 11.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @sasa1
      last edited by johnpoz

      Dude look at the picture I posted... You can do the packet capture right on pfsense... Then just download the pcap and open it with wireshark on any machine you want..

      see the post from above

      download.jpg

      in pfsense here

      packetcapture.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      S 1 Reply Last reply Reply Quote 0
      • S
        sasa1 @johnpoz
        last edited by

        @johnpoz now I followed your instructions, in pfsense I captured the packages, I downloaded the file which I then opened in whireshark, I attach the result.
        Thanks.
        cap.PNG

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @sasa1
          last edited by

          I don't see you sending client hello there, your sending fin,ack - means done with this conversation.

          yoursendingfin.jpg

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          S 1 Reply Last reply Reply Quote 0
          • S
            sasa1 @johnpoz
            last edited by

            @johnpoz in Filezilla I try the ftp connection and the exchanged packets are the ones I sent you, I also tried from another PC and the result is the same.
            What can I try?
            thank you

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @sasa1
              last edited by

              Well if your client is not sending hello, and just closing the connection.. That is on the client.

              Can you post up packet capture from your test machine.. This will only have your local IP and the servers IP in, so I can take a look and compare to mine.. As you saw in my sniff client hello is sent.. Your log shows sent, but its not what the sniff shows.

              You should be able to attach your sniff, or post it else where and let me know the link, etc.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @johnpoz
                last edited by

                here for example is on my client

                sniff.jpg

                And here is the pcap

                ftp.pcapng

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                S 1 Reply Last reply Reply Quote 0
                • S
                  sasa1 @johnpoz
                  last edited by

                  @johnpoz how can i send the file?

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @sasa1
                    last edited by

                    @sasa1 just upload it

                    upload.jpg

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      sasa1 @johnpoz
                      last edited by

                      @johnpoz ![0_1628094485640_packetcapture (12).cap](Uploading 100%)

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @sasa1
                        last edited by

                        @sasa1

                        That didn't seem to finish

                        finish.jpg

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          sasa1 @johnpoz
                          last edited by

                          @johnpoz I have tried several times to upload file but it always remains in this state.

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @sasa1
                            last edited by

                            How big is the file? Should be pretty tiny.. mine like 17KB

                            Upload it elsewhere, googledrive, dropbox, I will PM you my email.. just email it too me.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            S 1 Reply Last reply Reply Quote 0
                            • S
                              sasa1 @johnpoz
                              last edited by

                              @johnpoz ok thanks, I'm waiting for your email.

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @sasa1
                                last edited by johnpoz

                                @sasa1 I already PM'd it to you long time ago..

                                PM.jpg

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  sasa1 @johnpoz
                                  last edited by

                                  @johnpoz thanks, i sent the file.

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @sasa1
                                    last edited by johnpoz

                                    Ok - you send the hello... Then the server closes the session (fin,ack) vs sending back the server hello

                                    This has nothing to do with pfsense.

                                    fin.jpg

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    S 1 Reply Last reply Reply Quote 0
                                    • S
                                      sasa1 @johnpoz
                                      last edited by

                                      @johnpoz I have tried from many servers that they are on distinct networks (even geographically distant) but when I am behind pfsense I always have the same problem.
                                      how can such a thing happen?
                                      thanks.

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @sasa1
                                        last edited by johnpoz

                                        I have no idea - I am behind pfsense, zero issues as you have seen. But clearly the server sends you a FIN vs server hello.. How does that have anything to do with pfsense?

                                        Are you running IPS on pfsense? pfsense has nothing to do with this communication, it passes traffic or it doesn't.. Its not going have the server send you a FIN..

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          sasa1 @johnpoz
                                          last edited by

                                          @johnpoz I also tried on a new PC with Windows 10 (the other PCs are with Windows Server), only the operating system and nothing else and I have the same error message.

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @sasa1
                                            last edited by

                                            Maybe the site doesn't like your IP?

                                            The server is sending you a fin vs server hello.. Contact them.. Pfsense doesn't send fin in place of server, the server your talking to does that.

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            S 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.