FTP-Connection not possible

[ehrenwert]

Hello,

well, I've got a little problem:

My CentOS-based Servers are not reachable via FTP by using passive mode:

Status: Auflösen der IP-Adresse für server.name.de
Status: Verbinde mit 12.34.5.67:21...
Status: Verbindung hergestellt, warte auf Willkommensnachricht...
Antwort: 220 ProFTPD 1.3.4d Server (ProFTPD) [12.34.5.67]
Befehl: USER ftp_mylogin
Antwort: 331 Password required for ftp_mylogin
Befehl: PASS ********
Antwort: 230 User ftp_mylogin logged in
Befehl: SYST
Antwort: 215 UNIX Type: L8
Befehl: FEAT
Antwort: 211-Features:
Antwort: MDTM
Antwort: MFMT
Antwort: TVFS
Antwort: UTF8
Antwort: AUTH TLS
Antwort: MFF modify;UNIX.group;UNIX.mode;
Antwort: MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
Antwort: LANG en-US*
Antwort: PBSZ
Antwort: PROT
Antwort: REST STREAM
Antwort: SIZE
Antwort: 211 End
Befehl: OPTS UTF8 ON
Antwort: 200 UTF8 set to on
Status: Verbunden
Status: Empfange Verzeichnisinhalt...
Befehl: PWD
Antwort: 257 "/" is the current directory
Befehl: TYPE I
Antwort: 200 Type set to I
Befehl: PASV
Antwort: 227 Entering Passive Mode (12,34,5,67,132,18).
Befehl: MLSD
Fehler: Die Datenverbindung konnte nicht hergestellt werden: ETIMEDOUT - Connection attempt timed out
Fehler: Zeitüberschreitung der Verbindung
Fehler: Verzeichnisinhalt konnte nicht empfangen werden

PLESK firewall got the following rules: http://d.pr/i/X5dP


What can I do here?


P.S: I modified proftpd as described here: http://kb.parallels.com/en/2207

 

[IgorG]

Have you tried connect to ftp server with disabled firewall?

 

[ehrenwert]

Yes, if I disable the PLESK-firewall it works. But I do not want to disable the firewall all the time

Maybe it has to do with this: http://kb.parallels.com/en/2207 ? I used it to enable TLS.

 

[abdi]

http://wpguru.co.uk/2014/03/how-to-allow-passive-ftp-connections-in-plesk-on-amazon-ec2/

Should give you an idea of what to do ..
Basically you need to tell ProFTP to use a particular passive port range and then you white-list that port range in your plesk firewall.

That should do the trick

 

[ehrenwert]

Hi and thank you
Are these configuration files overwritten when I install a plesk-update?


Is the line:

MasqueradeAddress 54.243.21.14

neccessarry in my case?

 

[abdi]

Hi and thank you
Are these configuration files overwritten when I install a plesk-update?

Am not sure, but as I remember we didn't make this kind of a change so often ...