Passive Mode FTP?

Question

Level 1

13 points

Passive Mode FTP?

I'm trying to make iWeb '09 update my XServe (10.4.11) using it's built-in webserver, and it doesn't seem to have a "passive mode" switch. I use other FTP clients with Passive mode off, so I know the server works without passive mode.

I've followed the instructions at http://forums.macosxhints.com/archive/index.php/t-58679.html to set my passive ports to 49200-49200, and opened those ports in my firewall using Server Admin, but it still doesn't work.

Actually, I've discovered two problems:

1) Turning off the firewall on the server completely allows another FTP client to function, so either the firewall or the ports configuration above isn't working.

2) Even turning the firewall off doesn't allow iWeb'09 to work.

Anyone know how to make Passive FTP work without disabling the firewall on 10.4?

Thanks!

XServe G5, Mac OS X (10.4.11)

Posted on Oct 18, 2009 12:46 PM

Reply

Answer 1

Camelot

Level 9

58,299 points

Oct 18, 2009 9:41 PM in response to wpns

Have you checked System Preferences -> Network -> (interface) -> Proxies -> Use Passive FTP ?

All Apple apps use this setting to determine whether or not to use passive FTP for connections. Other (third-party) clients typically have their own setting.

Reply

Answer 2

wpns Author

Level 1

13 points

Oct 19, 2009 5:49 AM in response to Camelot

Unfortunately, the command line FTP tool doesn't look at that setting.

iWeb does work with that setting off, but it takes so long to bring up it's FTP server that it's just not worth using.

I ended up publishing to a local directory and using an scp script to write it to the server, which takes a couple of seconds.

No easy way to enable passive mode FTP?

Reply

Answer 3

Oct 19, 2009 7:30 AM in response to wpns

This isn't an answer to your question but since I don't allow ftp on my servers (unencrypted authentication concerns) I use afp shares for the different web accounts and use iWeb's "publish to folder" option. Users simply mount the shares, use "Publish to folder" and then unmount the shares. You could probably even script that part of the process if you wanted to, but I think it's simple enough.

My $.02,
=Tod

Reply

Answer 4

wpns Author

Level 1

13 points

Oct 19, 2009 8:08 AM in response to Tod Kuykendall

That's an interesting thought, are AFP shares secure over the Internet?

Thanks!

Reply

Answer 5

Oct 19, 2009 8:31 AM in response to wpns

If security is of interest here, then consider switching to sftp. That's vastly easier to punch through firewalls, and it avoids exposing your credentials. (ftp transmits authentication credentials - user and password - in cleartext.)

With command-mode ftp, you can select a passive-mode transfer.

Reply

Answer 6

wpns Author

Level 1

13 points

Oct 19, 2009 9:40 AM in response to MrHoffman

Do I have to do anything special to use sftp? iWeb's options are:

FTP
FTP with implicit SSL
FTP with TLS/SSL
SFTP

Yes, with command mode, and all my linux boxes, and my Perl code I can turn off Passive mode, I guess there's no way to enable it in the server?

Thanks!

Reply

Answer 7

Oct 19, 2009 12:26 PM in response to wpns

Anything? Donno. I use sftp at the command line regularly. sftp rides atop ssh, so you either need to enable that in your server configuration and your firewall or (if ssh is already enabled and punched through your firewall) you should be good to go.

Reply