Problem connect FTP server from OS X

Question

Level 1

0 points

Problem connect FTP server from OS X

Hello,

I have installed a Serv-U FTP Server on Windows 2000 server, and i have some problem to login.
From local network all working good, i can access on the FTP with Mac os X (with Cyberduck) and Windows (with FlashFXP).
But when i am outdoor, from internet the connection work fine on Windows with flashFXP but don't with Mac OS X : the login/password is ok, but not the listing of the directory when entering passive mode (timeout). Cyberduck is in passive mode like FlashFXP, but it seems have some problems to bypass the firewall 😟
Why the connection work from windows and not from MAC OS X ?
If you have some informations i will be happy ^^
Thx so much.
Bye
Grim

G5 Powermac, Mac OS X (10.4.7)

Posted on Sep 12, 2006 2:06 AM

Reply

Answer 1

Sep 12, 2006 4:23 AM in response to Grimbergen

Does MacOS or the program Cyberduck comes back with any error messages?
If so what does it say?

Suggestions/ideas;
If you have a Firewall program running on your Mac (a background process usually, run the main Firewall app), it may be blocking access to the network via FTP or some preferences are not set correctly - check the System Prefs/Network and Sharing prefs, and make certain that everything is Ok for FTP/network access.

Reply

Answer 2

Grimbergen Author

Level 1

0 points

Sep 12, 2006 5:29 AM in response to Michael Hutchison

Hello Michael !

Cyberduck return this error :
227 Entering Passive Mode (192.168.1.70.226)
I/O Erreur: Operation Timed out (/)

This occurs just before display the directory file of remote FTP.
It seems the remote firewall on the FTP server block cyberduck. The is no firewall on the mac and the Systeme/Network prefs seems ok no firewall is active.
I don't understand why all is working under windows et no under MAC 😟
Thx for your answer.

Reply

Answer 3

Sep 12, 2006 6:34 AM in response to Grimbergen

Bonjour, Grimbergen --
Question about this error you get with Cyberduck.
1) Is this the error you get when you're outside on the internet connecting to the same server that connects fine from 'inside' your home network?
2) This IP address (192.168.1.70) looks suspiciously close to an IP address I would expect to see "on the inside". (Cyberduck may be holding the 'inside IP address', instead of connecting to the public address)

Do you know what the "outside" or public IP address is, that the PC is connecting to when connecting to that ftp server?
If you can confirm that both mac and PC are connecting to the same IP address 'from the outside', this would help.

Reply

Answer 4

Grimbergen Author

Level 1

0 points

Sep 12, 2006 7:55 AM in response to Rick Van Vliet

Hi Rick,

Yes this error occur when i am outside, when i try from my home.
This adress (192.168.1.70) is the adress of windows 2000 server with serv-U. We can see it in Cyberduck because i have selected an serv-u option : "Allow passiv mode data transfer, use ip :" and 192.168.1.70.
If i disable this option in serv-U, in cyberduck i can see my public internet adress (213.223.x.x) but i have the same problem.

Office...........................Internet.................Home
Serv-U
(Firewall Kerio)
192.168.1.70..........213.223.x.x.............82.242.x.x
......................<---------------------- OK -----> FlashFXP (PC)
......................<--------------------- FAILED --> Cyberduck (MAC)

When i am inside the office, there are no probleme, mac and pc work fine when i'm connect to ftp://login:passwd@192.168.1.70:2222

Thanks for your help 🙂
Grim.

G5 Powermac Mac OS X (10.4.7) - Windows 2000 Server

Reply

Answer 5

Sep 12, 2006 8:11 AM in response to Grimbergen

OK. Well, I don't know what "Serv-U" is. (OK, I just looked it up. It's an FTP server for windows).

What I think should work would be to check the office router's forwarding, to open the FTP ports into the ServU 2000server.
So that, when you connect from outside to the public IP address(213.223.x.x)of your office, the router/firewall would then forward the FTP request into the server.

As far as I know, there's no way that you should be able to FTP using your 192.168.xx.xx address of the inside server, from the outside. The firewall "should" prohibit that connection. There are probably 10Million servers with that same 192.168.1.70 address....it's a private, non-routable address, designated to be used inside private LANs, like your office.
On the inside, of course this address would work from all inside computers.
Not sure what option you're disabling in ServU exactly.
Try this in cyberDuck (or any FTP client) FROM the OUTSIDE location:
1-Make new connection
2-enter server IP address (213.232.xx.xx, or outside publicIP)
3-Ignore path box
4-enter your username
5-enter your FTP password.
6-Don't add to keychain quite yet.
7-Set passiv here in connect mode.

You should have one Connection for inside your LAN, and one for outside.

Is this making sense?

Reply

Answer 6

Grimbergen Author

Level 1

0 points

Sep 12, 2006 12:08 PM in response to Rick Van Vliet

Hi Rick,

Yes of course 192168.1.70 is my LAN ip Office (private), my routers is coufiguring to redirect (ie) 8888 port to 192.168.1.70 from FTP event coming from my public IP (213.223.x.x). My FTP server (Serv-U) installed on my windows 2000 server, and listen port number is 8888.
When i am at my house (outside of the office of course), and i use my FTP client (FlashFXP)on a windows based pc, all working and i obtain this log :

[R] Connecting to 213.223.x.x -> IP=213.223.x.x PORT=8888
[R] Connected to 213.223.x.x
[R] 220 Serv-U FTP Server v6.3 for WinSock ready...
[R] USER test
[R] 331 User name okay, need password.
[R] PASS (hidden)
[R] 230 User logged in, proceed.
[R] SYST
[R] 215 UNIX Type: L8
[R] FEAT
[R] 211-Extension supported
[R] CLNT
[R] MDTM
[R] MDTM YYYYMMDDHHMMSS[+-TZ];filename
[R] SIZE
[R] SITE PSWD;EXEC;SET;INDEX;ZONE;CHMOD;MSG
[R] REST STREAM
[R] XCRC filename;start;end
[R] MODE Z
[R] MLST Type ;Size*;Create;Modify*;Win32.ea;
[R] 211 End
[R] CLNT FlashFXP 3.2.0.1080
[R] 200 Noted.
[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] MODE Z
[R] 200 MODE Z ok.
[R] PASV
[R] 227 Entering Passive Mode (192,168,1,70,16,229)
[R] Opening data connection IP: 213.223.x.x PORT: 8889
[R] LIST -al
[R] 150 Opening ASCII mode data connection for /bin/ls.
[R] 226 Transfer complete.
[R] List Complete: 182 bytes in 1,47 second (0,1 KB/s)

Now always from my home i use Cyberduck and the log is :

=====================================
Tue Sep 12 20:29:12 CEST 2006
/213.223.x.x
220 Serv-U FTP Server v6.3 for WinSock ready...
USER test
331 User name okay, need password.
PASS ******
230 User logged in, proceed.
SYST
215 UNIX Type: L8
NOOP
200 Command okay.
CWD /
250 Directory changed to /
PASV
227 Entering Passive Mode (192,168,1,70,16,228)
I/O Erreur: Operation timed out (/)

For the option disabled or enabled (nothing change) see this snapshot : http://baho.ifrance.com/snap.jpg
When i disabled this option the log are :
227 Entering Passive Mode (213,223,x,x,16,228)

I don't understand why FlashFXP can listing the directories and not Cyberduck 😟
I hope theses explains are more clear for you, and thx again 🙂
Bye

Reply

Answer 7

Sep 12, 2006 6:36 PM in response to Grimbergen

Grim, I'm really not sure then.
But can you try turning of mac's internal firewall, r any firewalls you may have on the mac?
There seems to be a "conversation" that's only going in one direction.
You say you're going in on port 8888. But in the Windows log, there's a onversation on port 8889
[R] 227 Entering Passive Mode (192,168,1,70,16,229)
[R] Opening data connection IP: 213.223.x.x PORT: 8889

But I don't see that 8888/8889 in the Mac's log.

Someone else may see something in here. I'm missing it. 😟

Reply

Answer 8

Grimbergen Author

Level 1

0 points

Sep 13, 2006 4:21 AM in response to Rick Van Vliet

Hi Rick !

The firewall is already turning off on the G5.
For the conversation on the port 8889 it's an other option of Serv-u who use 5 port for working in passive mode (see this snapshot : http://baho.ifrance.com/snap2.jpg).
I don't know what can i do for a sucessfully Cyberduck connexion !!!

Reply

Answer 9

Sep 13, 2006 4:57 AM in response to Grimbergen

Bonjour --
I can think of only two other things to try, for fun.
1) Try a demo version of Fetch, and see if we get the same listing problem. It's shareware, but you can try it for 30 days, otherwise it costs you to keep it.(we're trying to eliminate cyberduck as the problem)
http://www.fetchsoftworks.com/
2) Try connecting using a Terminal window.
Applications>Terminal.
type: ftp {enter}
type: open [213.242.xx.xx] {enter}
login, and you'll get authenticated.
at the prompt ftp>
type ls {enter}
you'll either get the listing, or you won't.
(to exit, type quitat the ftp>
If you do, we're a step ahead.
If you don't, then we have another issue.
(are you sure you don't have any other firewall software on the mac? Norton, Little Snitch, something?)

Can you try it from your home location still this afternoon? (Afternoon for you, it's 0700 here)

Reply

Answer 10

Sep 13, 2006 5:02 AM in response to Rick Van Vliet

One other thought.
email me using my address that you'll find in my profile...send me the IP address you're using, along with a user/password that you'll create for me (so you can delete that user when we're done) and I can work on it from here mac and Windows.
Sometime soon, a lightbulb will be turned on, and we'll see what we're missing.

Reply

Answer 11

Grimbergen Author

Level 1

0 points

Sep 13, 2006 5:42 AM in response to Rick Van Vliet

Hi !
There is no email visible in your profile 😟

Reply

Answer 12

Sep 13, 2006 5:49 AM in response to Grimbergen

Oh, silly me.
use this one, please:
sa@rickvanvliet.com
Thanks,
rick

Reply

Answer 13

Sep 13, 2006 3:41 PM in response to Grimbergen

Grimbergen,

I have a simlar situation that I began discussing in the thread http://discussions.apple.com/thread.jspa?threadID=625198&tstart=0

Basically, my Windows XP system can talk with an external FTP server, but my OS X box can't - it stops in the same way you describe. Both systems talk through the same WiFi system. I've tried a number of clients (terminal and GUI n the OS X system and they all have the same problem.

This is just to let you know that:
1) you are NOT alone
2) I'm also interested in whatever solution you find

Susan

Reply

Answer 14

Sep 13, 2006 4:37 PM in response to Aussie Susan

Hi Susan,
We found this afternoon that grim was trying to connect using a non-standard port (4321).
I was unable to connect with windows or mac clients, GUI or Terminal.
As soon as he opened the standard port (21) I connected instantly, from all clients (ein, mac, gui, trminal).

I'll look at your other issue, but I don't think it's quite the same as we;re experiencing here...
thanks

Reply