Windows users can't connect to proftpd

[jpkelly]

I had a (dv) 3.5 server with Media Temple (Plesk 8.6) and I just upgraded to their 4.0 version (Plesk 10.1). Now my clients who are on windows (using Windows Explorer) are having trouble connecting to FTP.
The config file is the same on the new server as the old server.
Does anyone have any ideas or suggestions on how to troubleshoot?

[mikeshinn]

Do you see anything in the proftp logs? And is the Windows server running anykind of firewall?

[jpkelly]

No firewall.
Here is the output of Trace, Level 5


Feb 24 17:59:42 [18003] <dns:2>: no IP address found in netaddr cache for name '10.211.55.3'
Feb 24 17:59:42 [18003] <dns:5>: stashed IP address '10.211.55.3' for name '10.211.55.3' in the netaddr cache
Feb 24 17:59:42 [18003] <dns:4>: addr 10.211.55.3 does not match addr 64.1.214.199
Feb 24 17:59:42 [18003] <response:1>: 500 Illegal PORT command
Feb 24 17:59:42 [18003] <signal:5>: signals blocked
Feb 24 17:59:42 [18003] <signal:5>: signals unblocked
Feb 24 17:59:42 [18003] <binding:4>: bound address 72.10.34.73, port 20 to socket fd 4
Feb 24 17:59:42 [18003] <response:1>: 425 Unable to build data connection: Connection refused

[jpkelly]

Here is Trace at level 10 after the ls command:


Feb 24 18:05:10 [24010] <timer:7>: reset timer ID 2 ('TimeoutIdle', for module '[none]')
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'PORT 10,211,55,3,8,16' to mod_tls.c
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'PORT 10,211,55,3,8,16' to mod_core.c
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'PORT 10,211,55,3,8,16' to mod_core.c
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <command:7>: dispatching CMD command 'PORT 10,211,55,3,8,16' to mod_core.c
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path '/'
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path '/.ftpaccess'
Feb 24 18:05:10 [24010] <auth:6>: dispatching auth request "getgrnam" to module mod_auth_file
Feb 24 18:05:10 [24010] <dns:10>: resolving name '10.211.55.3' to IP address
Feb 24 18:05:10 [24010] <dns:2>: no IP address found in netaddr cache for name '10.211.55.3'
Feb 24 18:05:10 [24010] <dns:7>: '10.211.55.3' resolved to IPv4 address 10.211.55.3
Feb 24 18:05:10 [24010] <dns:5>: stashed IP address '10.211.55.3' for name '10.211.55.3' in the netaddr cache
Feb 24 18:05:10 [24010] <dns:4>: addr 10.211.55.3 does not match addr 64.1.214.199
Feb 24 18:05:10 [24010] <response:7>: error response added to pending list: 500 Illegal PORT command
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <command:7>: dispatching LOG_CMD_ERR command 'PORT 10,211,55,3,8,16' to mod_log.c
Feb 24 18:05:10 [24010] <response:1>: 500 Illegal PORT command
Feb 24 18:05:10 [24010] <timer:7>: reset timer ID 2 ('TimeoutIdle', for module '[none]')
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'NLST' to mod_tls.c
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'NLST' to mod_core.c
Feb 24 18:05:10 [24010] <command:7>: dispatching PRE_CMD command 'NLST' to mod_core.c
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <command:7>: dispatching CMD command 'NLST' to mod_ls.c
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path '.'
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path '/'
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path '/.ftpaccess'
Feb 24 18:05:10 [24010] <auth:6>: dispatching auth request "getgrnam" to module mod_auth_file
Feb 24 18:05:10 [24010] <fsio:8>: using system stat() for path ''
Feb 24 18:05:10 [24010] <signal:5>: signals blocked
Feb 24 18:05:10 [24010] <signal:9>: signals already blocked (block count = 1)
Feb 24 18:05:10 [24010] <signal:9>: signals already unblocked (block count = 2)
Feb 24 18:05:10 [24010] <signal:9>: signals already blocked (block count = 1)
Feb 24 18:05:10 [24010] <signal:9>: signals already unblocked (block count = 2)
Feb 24 18:05:10 [24010] <signal:5>: signals unblocked
Feb 24 18:05:10 [24010] <binding:4>: bound address 72.10.34.73, port 20 to socket fd 4
Feb 24 18:05:10 [24010] <timer:7>: added timer ID 4 ('TimeoutStalled', for module '[none]'), triggering in 3600 seconds
Feb 24 18:05:10 [24010] <response:7>: error response added to pending list: 425 Unable to build data connection: Connection refused
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to write-lock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: write-lock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <lock:9>: attempting to unlock scoreboard fd 8 entry, offset 656
Feb 24 18:05:10 [24010] <lock:9>: unlock of scoreboard fd 8 entry, offset 656 succeeded
Feb 24 18:05:10 [24010] <command:7>: dispatching LOG_CMD_ERR command 'NLST' to mod_log.c
Feb 24 18:05:10 [24010] <command:7>: dispatching LOG_CMD_ERR command 'NLST' to mod_ls.c
Feb 24 18:05:10 [24010] <response:1>: 425 Unable to build data connection: Connection refused

[mt mattl]

Hi,

I work at (mt) and saw that you were having issues with the (dv). I haven't encountered any issues like this after upgrading my own (dv). I wanted to know if you had opened up a support request, or had gotten the issue resolved since Thursday. Feel free to contact me back through this forum or our Twitter feed with any updates on the situation.


Thanks

[mikeshinn]

Feb 24 18:05:10 [24010] <response:1>: 425 Unable to build data connection: Connection refused

Quick thought, with FTP thats almost always a firewall issue, either locally or upstream. Unlike any other protocol you may be familiar with, FTP is a highly complex multi-port protocol that requires either a stateful FTP firewall or a *lot* of open ports. If you can't build the data conntection, thats generally what causes this. Time to check your firewalls(s) and to fire up a sniffer to see whats going on. Make sure you check PASV and ACTIVE modes with FTP.

[jpkelly]

Thanks!
Yes it turned out to be my firewall.

[mikeshinn]

Glad to help.