Can't connect to FTP server when I'm connected via hotspot

I need to connect to my webserver via FTP from my MacOS (13.4.1). When I'm connected via home internet provider, everything is OK. But when I connect via hotspot from my iPhone (iOS 17), I can't connect to FTP. The error message is "Connection timeout". The Internet in web browser is working perfectly, but FTP connection doesn't work. I tried several FTP clients (Filezilla, Forklift, ...), but still the same problem. 

 

A few weeks ago, I used this FTP clients without any problem with hotspot, so maybe it could be related with iOS 17 update. 

 

Has anyone same problem? Is there any possibility to analyze network settings to find out where could be the problem? I tried to switch off the Firewall on MacOS, but no change...

 

Thanks.

iPhone 13 Pro, iOS 17

Posted on Sep 20, 2023 4:30 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 20, 2023 8:24 AM

Being older than IP networking itself (yes, really), and its pattern of connections is fundamentally incompatible with modern network firewalls, and being wildly insecure, FTP quite often causes issues, and increasingly often simply gets blocked.


To get FTP to work with a firewall, one or both firewalls (on the local network, and in the remote network) must scan the FTP traffic and preemptively open up the second port. The direction of this second connection depends on whether the FTP connection is operating in active or passive mode. But it’ll always run into a firewall, if the firewall isn’t configured to scan FTP traffic.


(This second data connection used by FTP usually uses an ephemeral port selected at run-time, so there’s no way a firewall can predict that without communications with the FTP server or FTP client, which means either opening up the entire ephemeral range, or configuring the FTP server to use a particular sub-range and opening that, or (as is common on middling and higher-spec firewalls) scanning the passing FTP traffic.)


As FTP openly leaks the server credentials in cleartext, the recipient firewall and recipient FTP server need to process and relocate the arriving files too, as the server can otherwise become filled with unwanted or illegal files.


If you need file uploads with your web server, use HTTPS file uploads, or configure and use SFTP.


If you really need FTP, set up a VPN to wrap the connection; that VPN might be L2TP/IPSec, or maybe FTPS.


PS: also learn about Gifar and other types of polyglot files, particularly if you’re exposing potentially untrusted uploaded files.

Similar questions

63 replies

Jul 12, 2024 7:35 AM in response to Tomas009

I was having this issue on my phone. After a week and dealing with support from multiple apps it came down to being my phone on cellular service. I contacted t-mobile and after a little bit the agent asked me if I had shut off my phone and did a reset. I thought it was ridiculous because my phone had died the day before and shut off. I told him I’d entertain the idea. It’s electronics 101 and guess what. It worked.


Not sure if you ever got your answer. But, maybe try that if you haven’t already.


Sep 26, 2023 8:41 AM in response to lvieira01

lvieira01 wrote:

I can't convince my clients to change something they're been using for years without any issues. For what i've been reading last days if Apple doesn't come out with a solution fast, the only way to solve this is downgrading to iOS 16. It's what i'm planning to do.


Ask them to post the login credentials on their web site. Seriously. That’s what they are effectively already doing.


Any file server with known credentials too often ends with myriad files on their server that are illegal to even possess, and with the ensuing legal hassles.


If they’re insistent, insert some text in your contract that makes it clear that you’ve warned them and this is their mess, so you are less likely to get blamed for any resulting illegalities.


PS: sftp also avoids ”fun” with firewalls.

Sep 23, 2023 11:52 AM in response to Tomas009

I am having the exact same problem, on 2 different computers using 2 different operating systems. Nothing has changed on either system, the only thing that has changes is I updated my phone to iOS 17 (now 17.0.1). I am a photojournalist, and often need to upload photos to different news organizations servers. Before the update, everything was fine. Now, I can't access any of my business client's servers even though my computers are on the internet. This is NOT small problem. I need to get these images into their servers as quickly as possible, and not getting them in is a major problem. Last night I covered a HS football game, and could not log into their server and had to email the photos which slows down their process and looks bad on me. Like I said, nothing has changed except for the iOS. The computer sees the server, and attempts to login, but times out. This NEEDS to be fixed!

Sep 25, 2023 9:54 AM in response to lvieira01

lvieira01 wrote:

9 in 10 photojournalists uses ftp to transmit their work

That may well be true, but it says the the news agencies or whatever entitities require that are grossly incompetent or even criminally negligent. From the point of view of a server it is perfectly trivial to implement a proper secure protocol; and from the client it is just a matter using sftp:// instead of ftp://


In case people are not aware: ftp sends user names and passwords in plain text. Think about it for a second.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can't connect to FTP server when I'm connected via hotspot

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.