Passive mode FTP -> List error?


Recommended Posts

I just set upped a ftp server on a old pc in my netwerk. When i try to connect it it gets the list error.

After some googling I found out that im not the only one and that it has to do with the ports?

The FTP is running on port 555. Forwarding all traffic from 555 to the machine with the ftp, and then I get that list error

Google only found alot more questions, but no answers :(

Is there any way to fix it? Without having to forward thousands of ports?

Greetings,

Speedy

EDIT* Using Bulletproof FTP server (trial)

Link to comment
https://www.neowin.net/forum/topic/282608-passive-mode-ftp-list-error/
Share on other sites

FTP uses 2 ports - normally 21 control and 20 data - as given above this link is some good info on what is required for FTP to work. And the difference between active and passive, etc..

http://slacksite.com/other/ftp.html

Why would you be running ftp on 555? I would assume that is your control port, what is your data port? They will both need to be forwarded to your machine behind the router, etc..

Im running the FTP on port 555 because my isp caps the default ftp ports to 40kbs speed.

So when I run it on any other port I get my full speeds.

Where can I change the dataport in bulletproof ftp? And then if I also forward that port it should be working?

  speedy_kevin said:
Im running the FTP on port 555 because my isp caps the default ftp ports to 40kbs speed.

So when I run it on any other port I get my full speeds.

Where can I change the dataport in bulletproof ftp? And then if I also forward that port it should be working?

585438885[/snapback]

Dude what is your connection speeds down/up? You do know that people downloading from you will be limited to your upload speed. And is that 40,000 bits or BYTES? ie Kb or KB ? If its 40KB, that would seem about right for a 384Kbit upload speed. And that anything else your doing, even downloading will use up part of that pipe, etc..

I have NEVER heard of a ISP throttling ftp - and they sure would not be throttling the command port, ie 21.. since no DATA passes on it. You would have to change the data port, or force your passive to be on a certain range. And people would have to connect to you with PASSIVE.

And if they were limiting the FTP bandwidth, to what keep people from running servers - since its against their AUP? 40 either Kb or KB is a VERY high limit - now 5 or 10 kbits would be a limit ;)

Edit: The picture provided would force the ftp server machine to be in the DMZ or UPnP would have be working, since your server could use any port above 1024 - are all those ports forwarded to your machine running FTP? If not - then nobody will every be able to make a data connection.

Edited by BudMan

My connection:

4mbit download / 1mbit upload

And Im 100% sure about the ftp throttling!

On the users-forum of my ISP there are many complaints about it. Also some work-arounds like this one are posted.

And about the picture; Filled in my ip, changed ports 1024 to 1027. Opened up the ports on the router. Restarted server.. And still the same problem

Dude what exactly is your problem? Are people still not able to get a data connection from the outside - DOES it work locally?

What are the connection details for your ftp? Just because the server is setup to run passive, does NOT mean the client is going to do so.

Can you point to these forums talking about this issue?

Sure why not - they can be translated. Can you PM me your ftp connection info, so I can see what your server is telling the client to do.

Are they getting in - but just can not list anything, ie create a data connection. Or can they NOT get in at all? Ie not asked for login, etc..

Edit: Also keep in mind if your server tells them to connect to 1027, that port needs to be open to them, etc.. If they are behind a company firewall - which many do not allow outbound connections on other than standard services port, ie http, https, ftp, Then no they would never be able to connect. Also - you have to make sure your server is sending them the right IP address to connect to - it might be sending its private address, vs the PUBLIC address. Which I would guess is your issue.

Also - keep in mind with a limit of 3 passive ports like that - you will never be able to have more than 3 connections.

Edited by BudMan
  BudMan said:
Sure why not - they can be translated.  Can you PM me your ftp connection info, so I can see what your server is telling the client to do.

Are they getting in - but just can not list anything, ie create a data connection.  Or can they NOT get in at all?  Ie not asked for login, etc..

Edit:  Also keep in mind if your server tells them to connect to 1027, that port needs to be open to them, etc..  If they are behind a company firewall - which many do not allow outbound connections on other than standard services port, ie http, https, ftp,  Then no they would never be able to connect.  Also - you have to make sure your server is sending them the right IP address to connect to - it might be sending its private address, vs the PUBLIC address.  Which I would guess is your issue.

Also - keep in mind with a limit of 3 passive ports like that - you will never be able to have more than 3 connections.

585441905[/snapback]

Here is the topic:

http://www.chelloo.com/forum/index.php?topic=6771.0

You probably need to register

I'll pm you the server details in a second so you can test it :)

Dude I just responded to your PM with the problem.

But so future people might have some info on the problem as well - your server is sending the WRONG IP address to connect to on the pasv command.

Let's say your IP address was 10.10.10.10 - I connect fine on the control port you gave of 555 but when the PASV command comes back its says to go to 10.10.13.10 on port 1025

Here is where made connection

i Session 00002 established for session /xx.xx.86.xxx

Here is what your server sent;

> PASV

< 227 Entering Passive Mode (xx,xx,89,xx,4,1)

I x'd out the IP for your privacy - but its just the 4 octets of the IP your suppose to connect to (should be the IP address of the FTP server - in your case the third octet was off by 3) and then you convert the port number with p1*256+p2 or 4*256+1 or 1025 in this case

I can only guess you have multiple IP's? Or you typo'd something in the setup, or you have a problem with name resolution? But it will never connect like that ;)

Hope that helps!

edit: Ah I see you fixed it;

> PASV

< 227 Entering Passive Mode (xx,xx,86,xxx,4,0)

i Data connection 5284BA connected.

> LIST

< 150 Data connection accepted from xx.x.xxx.xx:3646; transfer starting.

< drwxr-xr-x 1 ftp ftp 0 Feb 11 14:30 xxxxxxxxxxxxxxx

< drwxr-xr-x 1 ftp ftp 0 Feb 09 20:01 xxxxxxxxxxxxxx

i Data connection 5284BA closed normally.

< 226 Transfer ok

Edited by BudMan
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • inception horn at max volume every time you copy.
    • Doesn't Windows have I build clipboard history? Win+V
    • Quantum computer does something for first time, creates "certified truly random" numbers by Sayan Sen Image by Ron Lach via Pexels A group of researchers from JPMorganChase, Quantinuum, Argonne National Laboratory, Oak Ridge National Laboratory, and The University of Texas at Austin has reached a major milestone in quantum computing. In a new paper published in Nature, they describe how they used a 56-qubit quantum computer to generate random numbers and then proved those numbers were truly random using powerful classical supercomputers. This achievement, called "certified randomness," could be useful in areas like cryptography, privacy, and fairness. Certified randomness means the numbers are not just unpredictable, but also freshly created and mathematically verified. Classical computers can’t do this on their own. They usually rely on hardware random-number generators, which can be tampered with. But with this new method, even if someone tried to interfere with the quantum computer, they wouldn’t be able to fake the randomness and still pass the certification. The idea behind the protocol was first proposed by Scott Aaronson, a computer science professor at UT Austin. He worked with his former postdoctoral researcher, Shih-Han Hung, to support the experimental team. “When I first proposed my certified randomness protocol in 2018, I had no idea how long I’d need to wait to see an experimental demonstration of it,” Aaronson said. “Building upon the original protocol and realizing it is a first step toward using quantum computers to generate certified random bits for actual cryptographic applications.” To carry out the experiment, the team accessed Quantinuum’s System Model H2-1 quantum computer over the internet. They used a method called random circuit sampling (RCS), which is known to be extremely hard for classical computers to simulate. The process had two main steps. First, the researchers sent the quantum computer a series of challenge circuits created from a small seed of randomness. The quantum computer had to solve these challenges by picking one of many possible answers at random. Then, in the second step, classical supercomputers checked the results to confirm the randomness was real. The team used several supercomputers with a combined performance of 1.1 × 10¹⁸ floating-point operations per second (1.1 ExaFLOPS) to certify 71,313 bits of entropy. This means they proved that the random bits couldn’t have been generated by classical methods, at least not under realistic conditions and assumptions. “This work marks a major milestone in quantum computing, demonstrating a solution to a real-world challenge using a quantum computer beyond the capabilities of classical supercomputers today,” said Marco Pistoia, Head of Global Technology Applied Research at JPMorganChase. Quantinuum had upgraded its H2 system to 56 qubits in June 2024. Thanks to its high accuracy and ability for any qubit to connect with any other, the system was able to perform RCS far better than previous machines. This upgrade, combined with Aaronson’s protocol, made the breakthrough possible. “Today, we celebrate a pivotal milestone that brings quantum computing firmly into the realm of practical, real-world applications,” said Dr. Rajeeb Hazra, President and CEO of Quantinuum. “These results in quantum computing were enabled by the world-leading U.S. Department of Energy computing facilities at Oak Ridge National Laboratory, Argonne National Laboratory and Lawrence Berkeley National Laboratory,” said Travis Humble, director of the Quantum Computing User Program at ORNL. While quantum computers have shown they can outperform classical ones in theory, turning that power into something useful has been a challenge. This experiment shows that quantum computers can now do something practical that classical computers simply can’t match. Source: University of Texas, Nature This article was generated with some help from AI and reviewed by an editor. Under Section 107 of the Copyright Act 1976, this material is used for the purpose of news reporting. Fair use is a use permitted by copyright statute that might otherwise be infringing.
    • I noticed when I click on the update button (from the desktop app), it says I'm still on the latest version, that does not give me access to ChatGPT five, and I do not see GPT-5 even in the web account either, despite being a pro customer.
  • Recent Achievements

    • First Post
      EzraNougat earned a badge
      First Post
    • One Month Later
      westDvina earned a badge
      One Month Later
    • Community Regular
      Bern@rd went up a rank
      Community Regular
    • Week One Done
      Joey Solo earned a badge
      Week One Done
    • Week One Done
      Vicente C Alves earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      711
    2. 2
      +FloatingFatMan
      201
    3. 3
      ATLien_0
      163
    4. 4
      Xenon
      130
    5. 5
      wakjak
      110
  • Tell a friend

    Love Neowin? Tell a friend!