MLSD - ENETUNREACH - Network unreachable

[Alex King]

Hi,

We are currently experiencing an issue with the latest version of the client (3.11.0(x64)) where it is unable to open the data connection after entering passive mode and entering MLSD.

This is however is only the case (as far as we have seen) on Windows 7 x64 Professional as the connection works as expected on Windows 8.1 x64.

We have a number of logs, one from the Windows 7 x64 machine, one from the Windows 8.1 x64 machine and one from ftptest.net.

Here is the detailed connection log from the Windows 7 x64 machine:

--
Status: Resolving address of ftp.hprhydro.com
Status: Connecting to 78.129.242.145:21...
Status: Connection established, waiting for welcome message...
Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Response: 220-You are user number 4 of 50 allowed.
Response: 220-Local time is now 13:34. Server port: 21.
Response: 220-This is a private system - No anonymous login
Response: 220-IPv6 connections are also welcome on this server.
Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: AUTH TLS
Response: 234 AUTH TLS OK.
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Command: USER hprukcom@…
Response: 331 User hprukcom@… OK. Password required
Command: PASS
Response: 230 OK. Current restricted directory is /
Command: SYST
Response: 215 UNIX Type: L8
Command: FEAT
Response: 211-Extensions supported:
Response: EPRT
Response: IDLE
Response: MDTM
Response: SIZE
Response: MFMT
Response: REST STREAM
Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response: MLSD
Response: AUTH TLS
Response: PBSZ
Response: PROT
Response: TVFS
Response: ESTA
Response: PASV
Response: EPSV
Response: SPSV
Response: ESTP
Response: 211 End.
Status: Server does not support non-ASCII characters.
Command: PBSZ 0
Response: 200 PBSZ=0
Command: PROT P
Response: 200 Data protection level set to "private"
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is your current location
Command: TYPE I
Response: 200 TYPE is now 8-bit binary
Command: PASV
Response: 227 Entering Passive Mode (78,129,242,145,190,72)
Command: MLSD
Error: The data connection could not be established: ENETUNREACH - Network unreachable
Error: Connection timed out after 20 seconds of inactivity
Error: Failed to retrieve directory listing
--

Here is the log for the Windows 8.1 x64 machine:

--
Status: Resolving address of hprhydro.com
Status: Connecting to 78.129.242.145:21...
Status: Connection established, waiting for welcome message...
Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Response: 220-You are user number 6 of 50 allowed.
Response: 220-Local time is now 15:09. Server port: 21.
Response: 220-This is a private system - No anonymous login
Response: 220-IPv6 connections are also welcome on this server.
Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: AUTH TLS
Response: 234 AUTH TLS OK.
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Command: USER hprukcom@…
Response: 331 User hprukcom@… OK. Password required
Command: PASS
Response: 230 OK. Current restricted directory is /
Command: SYST
Response: 215 UNIX Type: L8
Command: FEAT
Response: 211-Extensions supported:
Response: EPRT
Response: IDLE
Response: MDTM
Response: SIZE
Response: MFMT
Response: REST STREAM
Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response: MLSD
Response: AUTH TLS
Response: PBSZ
Response: PROT
Response: TVFS
Response: ESTA
Response: PASV
Response: EPSV
Response: SPSV
Response: ESTP
Response: 211 End.
Status: Server does not support non-ASCII characters.
Command: PBSZ 0
Response: 200 PBSZ=0
Command: PROT P
Response: 200 Data protection level set to "private"
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is your current location
Command: TYPE I
Response: 200 TYPE is now 8-bit binary
Command: PASV
Response: 227 Entering Passive Mode (78,129,242,145,169,207)
Command: MLSD
Response: 150 Accepted data connection
Response: 226-Options: -a -l
Response: 226 40 matches total
Status: Directory listing of "/" successful
--

Additionally here is the log from 'ftptest.net':

--
Results
Your server is working and assorted routers/firewalls have been correctly configured for explicit FTP over TLS as performed by this test. However there have been warnings about compatibility issues, not all users will be able to use your server.
For maximum compatibility, consider resolving these warnings.

Status: Resolving address of ftp.hprhydro.com
Status: Connecting to 78.129.242.145
Warning: The entered address does not resolve to an IPv6 address.
Status: Connected, waiting for welcome message...
Reply: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Reply: 220-You are user number 3 of 50 allowed.
Reply: 220-Local time is now 13:31. Server port: 21.
Reply: 220-This is a private system - No anonymous login
Reply: 220-IPv6 connections are also welcome on this server.
Reply: 220 You will be disconnected after 15 minutes of inactivity.
Command: CLNT ​https://ftptest.net on behalf of 82.69.135.94
Reply: 530 You aren't logged in
Command: AUTH TLS
Reply: 234 AUTH TLS OK.
Status: Performing TLS handshake...
Status: TLS handshake successful, verifying certificate...
Command: USER hprukcom@…
Reply: 331 User hprukcom@… OK. Password required
Command: PASS
Reply: 230 OK. Current restricted directory is /
Command: SYST
Reply: 215 UNIX Type: L8
Command: FEAT
Reply: 211-Extensions supported:
Reply: EPRT
Reply: IDLE
Reply: MDTM
Reply: SIZE
Reply: MFMT
Reply: REST STREAM
Reply: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Reply: MLSD
Reply: AUTH TLS
Reply: PBSZ
Reply: PROT
Reply: TVFS
Reply: ESTA
Reply: PASV
Reply: EPSV
Reply: SPSV
Reply: ESTP
Reply: 211 End.
Command: PBSZ 0
Reply: 200 PBSZ=0
Command: PROT P
Reply: 200 Data protection level set to "private"
Command: PWD
Reply: 257 "/" is your current location
Status: Current path is /
Command: TYPE I
Reply: 200 TYPE is now 8-bit binary
Command: PASV
Reply: 227 Entering Passive Mode (78,129,242,145,183,129)
Command: MLSD
Status: Data connection established, performing TLS handshake...
Reply: 150 Accepted data connection
Status: TLS handshake successful, verifying certificate...
Status: TLS session of transfer connection has been resumed.
Reply: 226-Options: -a -l
Reply: 226 40 matches total
Listing: type=cdir;sizd=4096;modify=20150504160929;UNIX.mode=0755;UNIX.uid=821;UNIX.gid=99;unique=802g1ea07c3; .
Listing: type=pdir;sizd=4096;modify=20150504160929;UNIX.mode=0755;UNIX.uid=821;UNIX.gid=99;unique=802g1ea07c3; ..
Listing: type=file;size=22532;modify=20150416151516;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea0001; .DS_Store
Listing: type=file;size=15;modify=20150521150920;UNIX.mode=0600;UNIX.uid=821;UNIX.gid=832;unique=802g1ea07c9; .ftpquota
Listing: type=file;size=41;modify=20150414130322;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea1769; .gitignore
Listing: type=file;size=3107;modify=20150419074713;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea4b5f; .htaccess
Listing: type=file;size=89;modify=20150414130322;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea176b; .htaccess-static-site
Listing: type=file;size=1655;modify=20150414130322;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea176c; 404.php
Listing: type=file;size=17816;modify=20150414130322;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea176d; LICENSE.txt
Listing: type=file;size=4310;modify=20150414130322;UNIX.mode=0644;UNIX.uid=821;UNIX.gid=832;unique=802g1ea176e; README.txt
Status: Skipped display of 30 listing lines
Status: Success
--

As can be seen it connects fine on Win 8.1 and 'ftptest.net' however is having issues on the Windows 7 x64 machine. These issues are not present however in earlier versions of FileZilla (versions 3.2.7 and 3.9.0.6 to be precise).

[Tim Kosse]

Duplicate of #10443, please follow the instructions in that ticket.