remote ftp ssl access failed
-
@johnpoz in Filezilla I try the ftp connection and the exchanged packets are the ones I sent you, I also tried from another PC and the result is the same.
What can I try?
thank you -
Well if your client is not sending hello, and just closing the connection.. That is on the client.
Can you post up packet capture from your test machine.. This will only have your local IP and the servers IP in, so I can take a look and compare to mine.. As you saw in my sniff client hello is sent.. Your log shows sent, but its not what the sniff shows.
You should be able to attach your sniff, or post it else where and let me know the link, etc.
-
-
@johnpoz how can i send the file?
-
@sasa1 just upload it
-
@johnpoz 
-
-
@johnpoz I have tried several times to upload file but it always remains in this state.
-
How big is the file? Should be pretty tiny.. mine like 17KB
Upload it elsewhere, googledrive, dropbox, I will PM you my email.. just email it too me.
-
@johnpoz ok thanks, I'm waiting for your email.
-
@sasa1 I already PM'd it to you long time ago..
-
@johnpoz thanks, i sent the file.
-
Ok - you send the hello... Then the server closes the session (fin,ack) vs sending back the server hello
This has nothing to do with pfsense.
-
@johnpoz I have tried from many servers that they are on distinct networks (even geographically distant) but when I am behind pfsense I always have the same problem.
how can such a thing happen?
thanks. -
I have no idea - I am behind pfsense, zero issues as you have seen. But clearly the server sends you a FIN vs server hello.. How does that have anything to do with pfsense?
Are you running IPS on pfsense? pfsense has nothing to do with this communication, it passes traffic or it doesn't.. Its not going have the server send you a FIN..
-
@johnpoz I also tried on a new PC with Windows 10 (the other PCs are with Windows Server), only the operating system and nothing else and I have the same error message.
-
Maybe the site doesn't like your IP?
The server is sending you a fin vs server hello.. Contact them.. Pfsense doesn't send fin in place of server, the server your talking to does that.
-
@johnpoz I also tried from other networks (with different public IP address) but unfortunately the behavior does not change
I cannot understand how this situation is possible
anyway thanks for the support -
I don't understand it either.. I have no issues, using pfsense (pfsense wouldn't interfere with traffic anyway).. its either allowed or its not.. Your allowed to talk to the server via port 21... The same session is used to. Your seeing a fin back from the server, pfsense can not send those.
Can you send me a pcap from the wan side this time to validate that the client hello is being sent out the wan.. you can send to the same email address you did before.
Its possible with IPS that the client hello is being blocked, and then the server says well no client hello so just close.. Are you running ips - Snort? Or Suricata?
-
I got your latest email, not the actual capture but a picture.
In that looks like your sending fin to server, vs your hello.
Again I ask are you running IPS? The lan side sniff does not match up with the wan side. On the lan your showing sending a client hello and server sending back fin. But on wan side looks like your just sending fin and not the client hello.
