Resolved plesk connection ftp, command MLSD failed, PassivePorts allready added

[D-JAY]

Hi everybody,
I have some trouble to connected with FileZilla in FTP to my server (Ubuntu 16.04.3 LTS‬ with Plesk Onyx 17.5.3).
I allready readed those subjects :
- FTP Secured TLS does connect but does not obtain directory listing
- How to configure a passive ports range for ProFTPd on a server behind a firewall?

My file /etc/proftpd.conf contains :

</IfModule>
PassivePorts 49152 65534
</Global>

and in plesk in tools -> Firewall i had server FTP allow incoming for all et i had a other FTP Passive Ports allow incoming for all on ports 49152-65534/tcp.

And it still not working.

Just the part of ip_conntrack_ftp i don't understand very well, my result in the shell when i enter
/sbin/modprobe ip_conntrack_ftp and lsmod | grep conntrack_ftp is :

nf_conntrack_ftp 20480 0
nf_conntrack 106496 8 nf_nat,nf_nat_ipv4,xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_netlink,nf_conntrack_ftp,nf_conntrack_ipv4,nf_conntrack_ipv6

I tried to connect in the shell with lftp and it works find just a warning :
WARNING: Certificate verification: Not trusted
WARNING: Certificate verification: certificate common name doesn't match requested host name ‘127.0.0.1’
because i think it use the global certificate of the server and i connect on a other domain.

If i allow in Plesk > Tools & Settings > Security Policy > FTPS usage policy > Allow secure FTPS connections and not secure and i use in FileZilla not secure it works find.

If someone can help me, I would be very grateful to him.

Sorry for my english.

Cédric.

 

[Bitpalast]

By your headline - I am confused. Could you please clarify whether the connection fails or whether the connection succeeds and the MLSD command fails?

 

[AYamshanov]

Hello,
Could you please paste logs from FileZilla? Is Plesk installed in Cloud environment? Is Plesk work behind NAT?

 

[D-JAY]

Hello, first of all, thank you for your answers.
Sorry for the title, yes the connection works, only the MLSD command fails.

Plesk is installed on VPS cloud at 1&1. VPS | Créer un serveur virtuel privé pas cher | Windows ou Linux

My log of Filezilla :

2017-12-18 17:02:07 8308 1 Status: Address resolution of xxxxxx
2017-12-18 17:02:07 8308 1 Status: Sign in to xxxxxxxxxxx:21 ...
2017-12-18 17:02:07 8308 1 Status: Connection established, waiting for the greeting message ...
2017-12-18 17:02:07 8308 1 Answer: 220 ProFTPD 1.3.5d Server (ProFTPD) [xxxxxxxxx]
2017-12-18 17:02:07 8308 1 Order: AUTH TLS
2017-12-18 17:02:08 8308 1 Answer: 234 Successful AUTH TLS
2017-12-18 17:02:08 8308 1 Status: Initialization of TLS ...
2017-12-18 17:02:08 8308 1 Status: Certificate Verification ...
2017-12-18 17:02:08 8308 1 Status: TLS connection established.
2017-12-18 17:02:08 8308 1 Order: USER xxxxxxxxxxxx
2017-12-18 17:02:08 8308 1 Answer: 331 Password required for xxxxxxxxxxxxxxxx
2017-12-18 17:02:08 8308 1 Order: PASS **********
2017-12-18 17:02:08 8308 1 Answer: 230 User xxxxxxxxxxxxx logged in
2017-12-18 17:02:08 8308 1 Command: SYST
2017-12-18 17:02:08 8308 1 Answer: 215 UNIX Type: L8
2017-12-18 17:02:08 8308 1 Order: FEAT
2017-12-18 17:02:08 8308 1 Answer: 211-Features:
2017-12-18 17:02:08 8308 1 Answer: TVFS
2017-12-18 17:02:08 8308 1 Answer: MFMT
2017-12-18 17:02:08 8308 1 Answer: SIZE
2017-12-18 17:02:08 8308 1 Answer: PROT
2017-12-18 17:02:08 8308 1 Answer: CCC
2017-12-18 17:02:08 8308 1 Answer: PBSZ
2017-12-18 17:02:08 8308 1 Answer: AUTH TLS
2017-12-18 17:02:08 8308 1 Answer: MFF modify; UNIX.group; UNIX.mode;
2017-12-18 17:02:08 8308 1 Answer: REST STREAM
2017-12-18 17:02:08 8308 1 Answer: MLST modify *; perm *; size *; type *; unique *; UNIX.group *; UNIX.mode *; UNIX.owner *;
2017-12-18 17:02:08 8308 1 Answer: LANG en-US.UTF-8 *
2017-12-18 17:02:08 8308 1 Answer: UTF8
2017-12-18 17:02:08 8308 1 Answer: EPRT
2017-12-18 17:02:08 8308 1 Answer: EPSV
2017-12-18 17:02:08 8308 1 Answer: MDTM
2017-12-18 17:02:08 8308 1 Answer: SSCN
2017-12-18 17:02:08 8308 1 Answer: 211 End
2017-12-18 17:02:08 8308 1 Order: OPTS UTF8 ON
2017-12-18 17:02:08 8308 1 Answer: 200 UTF8 set to on
2017-12-18 17:02:08 8308 1 Order: PBSZ 0
2017-12-18 17:02:08 8308 1 Answer: 200 PBSZ 0 successful
2017-12-18 17:02:08 8308 1 Order: PROT P
2017-12-18 17:02:08 8308 1 Answer: 200 Protection set to Private
2017-12-18 17:02:08 8308 1 Status: Online
2017-12-18 17:02:08 8308 1 Status: Recovering the contents of the folder ...
2017-12-18 17:02:08 8308 1 Order: PWD
2017-12-18 17:02:08 8308 1 Answer: 257 "/" is the current directory
2017-12-18 17:02:08 8308 1 Order: TYPE I
2017-12-18 17:02:09 8308 1 Answer: 200 Type set to I
2017-12-18 17:02:09 8308 1 Order: PASV
2017-12-18 17:02:09 8308 1 Answer: 227 Entering Passive Mode (82,223,18,63,194,152).
2017-12-18 17:02:09 8308 1 Order: MLSD
2017-12-18 17:02:30 8308 1 Error: Data connection can not be established: ETIMEDOUT - Connection attempt expired

Thanks for your help.

 

[Bitpalast]

You probably have an additional firewall in front of your server where you need to open the passive port range, too.

 

[D-JAY]

Thank you very much, indeed totally forgotten the firewall of 1&1...
Now everything works very well !
Thanks.