Resolved Cannot connect by FTP passive mode

[clinton4]

Hi,

I'am running Plesk 11.5 on a CentOS 6 box and i cannot connect by FTP in passive mode.

This is the log from my FTP client:

Status: Resolving address of xxxxxxx.net
Status: Connecting to x.x.x.x:21...
Status: Connection established, waiting for welcome message...
Response: 220 ProFTPD 1.3.4c Server (ProFTPD) [x.x.x.x]
Command: USER xxxx
Response: 331 Password required for xxxx
Command: PASS *********************
Response: 230 User xxxx logged in
Command: SYST
Response: 215 UNIX Type: L8
Command: FEAT
Response: 211-Features:
Response: MDTM
Response: MFMT
Response: TVFS
Response: UTF8
Response: AUTH TLS
Response: MFF modify;UNIX.group;UNIX.mode;
Response: MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
Response: LANG en-US*
Response: PBSZ
Response: PROT
Response: REST STREAM
Response: SIZE
Response: 211 End
Command: OPTS UTF8 ON
Response: 200 UTF8 set to on
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is the current directory
Command: TYPE I
Response: 200 Type set to I
Command: PASV
Response: 227 Entering Passive Mode (162,13,3,244,179,200).
Command: MLSD
Error: Connection timed out
Error: Failed to retrieve directory listing

If i stop iptables, i can connect in passive mode. So how do i solve this?

Thanks in advance

 

[clinton4]

Bump!?

 

[IgorG]

This looks like a known problem. Have you checked KB - Cannot connect to FTP in passive mode ?

 

[AYamshanov]

Hi,

You need set range for passive ports and allow this range in iptables.

Response: 227 Entering Passive Mode (x,x,x,x,179,200).

It is (179*256)+200 = 46024/tcp. I think your iptables is blocking this by default.

 

[clinton4]

This looks like a known problem. Have you checked KB - Cannot connect to FTP in passive mode ?

Thanks IgorG, i actually had his kb in my bookmarks, but resulting in a 404 page. It so annoying when Plesk change url's on their kb page without setting up a 301 redirect. Its not feew times this has happened.

 

[SunRabbit]

I actually had his kb in my bookmarks, but resulting in a 404 page. It so annoying when Plesk change url's on their kb page without setting up a 301 redirect. Its not few times this has happened.

Well, actually during all these ages we were creating tons of redirects in order to follow our domain changes:
kb.sw-soft.com -> kb.parallels.com -> kb.sp.parallels.com -> kb.odin.com -> kb.plesk.com -> support.plesk.com/hc
We have over 9k redirects configured on the previous knowledge base location.

If you could specify exact broken URL I will be glad to check it out, especially for such popular KB article. However, there is a possibility that redirect chain had been broken at some earlier stage, on the domain that now is out of our control. We also constantly updating/improving content on the current support.plesk.com/hc location, some articles might be deleted as outdated/duplicate and sadly new engine does not allow us to make internal redirects for them.

 

[clinton4]

The url i had in my bookmark is KB Odin: My server is behind a firewall. How do I configure a passive ports range for ProFTPd? and is resulting in a message saying "You can't see internal articles".

Content is available at archive.org: KB Parallels: My server is behind a firewall. How do I configure a passive ports range for ProFTPd?

 

[SunRabbit]

The url i had in my bookmark is KB Odin: My server is behind a firewall. How do I configure a passive ports range for ProFTPd? and is resulting in a message saying "You can't see internal articles".
Content is available at archive.org: KB Parallels: My server is behind a firewall. How do I configure a passive ports range for ProFTPd?

Yes, thank you - this would be a good illustration. The sad thing, however, is that I do not think that it could be fixed.
Your link at kb.parallels.com redirects to corresponding kb.sp.parallels.com page and fails. In fact, there were both kb.sp and odin pages (both down at this moment):
KB Parallels: My server is behind a firewall. How do I configure a passive ports range for ProFTPd?
KB Odin: My server is behind a firewall. How do I configure a passive ports range for ProFTPd?

On a positive note, I could confirm that redirect kb.plesk.com/en/1240 -> support.plesk.com/hc/en-us/articles/213902285 works like a charm! Therefore I would advise replacing url to "kb.plesk.com" in old bookmarks.