help: cannot access ftp (passive mode)

[VictorSo]

I am using CentOS 6, plesk 11.0.9.
After installing, I cannot use filezilla to access ftp and show the code as below.

_______________________________________________________________
Command: PWD
Response: 257 "/"
Command: TYPE I
Response: 200
Command: PASV
Error: Disconnected from server: ECONNABORTED - Connection aborted
Error: Failed to retrieve directory listing
_______________________________________________________________


Anyone can help!!!!!

 

[abdi]

Do you have a firewall that closing all ports that filezilla requires ?

 

[esbon]

Hi Joseph, did you find a solution to your problem? If so, would you please post your solution?

 

[RuedigerK]

Centos 6.3 ?
Try temp. disable the (plesk-)Firewall if iptables is activ.

 

[esbon]

thanks for replying so fast. I did disable it like this: /etc/init.d/psa-firewall stop
then checked for iptables like this: /etc/rc.d/init.d/iptables status
and iptables were up. Anyway, I still can't get FTP passive to work on FTP active mode

 

[RuedigerK]

pls. try /etc/rc.d/init.d/iptables stop ;-)

 

[esbon]

It is now working with unsecured FTP, it still not working with FTP TLS/SSL. The weird thing is it was working until last update: 10.4.4 Update #47

Do iptables need to stay down? They will started next time xinetd starts

Thanks so much for helping

 

[esbon]

Hi, I just remembered I had configured proftpd with this kb: http://kb.parallels.com/en/2207 for TLS support. I also checked to see if the current version: ProFTPD Version 1.3.3e is compiled for mod_tls.c and it is. Something changed and I can't figure it out.

 

[esbon]

RuedigerK, I wanted to let you know after stopping the iptables, I went to psa-firewall and modified one of the rules to get iptables to restart, and everything is now working with FTP-TLS as well. What do you think the problems was? iptables?

Thanks a million for helping

 

[vincenzo.t]

Hello,

try to check the load modules of iptables with

nano /etc/sysconfig/iptables-config

check if you have this

IPTABLES_MODULES=""

Bye

 

[esbon]

This is what I have in iptables.config: IPTABLES_MODULES="ip_conntrack_netbios_ns" should the quotation marks be empty?

Thanks for replying!

 

[vincenzo.t]

Try to remove it and reload iptables

service iptables restart

Check again if passive mode works or not, otherwise try to add this:

ip_conntrack_ftp

Into the string of iptables and restart again.

Are you into dedicated or into VPS?

 

[esbon]

This is a dedicated server.

 

[vincenzo.t]

So with my answer you do not have resolved?

 

[esbon]

Vincenzo, I added IPTABLES_MODULES="ip_conntrack_ftp" and restarted iptables, but nothing different happened. Passive FTP works fine with unsecured connections, but I am still having problems with TLS/SSL FTP connections. I get the error of not being able to go into passive mode.

 

[vincenzo.t]

unfortunatly I do not have any other solution for that

 

[Jay Versluis]

Esbon,

Passive Mode and secure FTP are two different issues. This article explains how to use SFTP in Plesk: http://wpguru.co.uk/2012/03/how-to-use-sftp-with-plesk-10-4-4/

Note that currently (Plesk 11.5) only the main subscription user can use SFTP, not additional FTP users.