Use explicit FTP has stopped working in the latest version!

[gh0st]

Running the latest version of Filezilla (3.25.1) and this worked like yesterday, but not any more now...

Status:      	Resolving address of ftpcluster.loopia.se
Status:      	Connecting to 194.9.94.127:21...
Status:      	Connection established, waiting for welcome message...
Response: 	220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Response: 	220-You are user number 249 of 600 allowed.
Response: 	220-Local time is now 14:10. Server port: 21.
Response: 	220-This is a private system - No anonymous login
Response: 	220-IPv6 connections are also welcome on this server.
Response: 	220 You will be disconnected after 15 minutes of inactivity.
Command:	AUTH TLS
Response: 	502 AUTH TLS OK.
Command:	AUTH SSL
Error:        	Could not read from socket: ECONNRESET - Connection reset by peer
Error:        	Could not connect to server

Checking with ​https://ftptest.net/#result I get this;

Status: Resolving address of ftpcluster.loopia.se
Status: Connecting to 194.9.94.127
Warning: The entered address does not resolve to an IPv6 address.
Status: Connected, waiting for welcome message...
Reply: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
Reply: 220-You are user number 240 of 600 allowed.
Reply: 220-Local time is now 14:09. Server port: 21.
Reply: 220-This is a private system - No anonymous login
Reply: 220-IPv6 connections are also welcome on this server.
Reply: 220 You will be disconnected after 15 minutes of inactivity.
Command: CLNT https://ftptest.net on behalf of 95.195.209.171
Reply: 530 You aren't logged in
Command: AUTH TLS
Reply: 234 AUTH TLS OK.
Status: Performing TLS handshake...
Status: TLS handshake successful, verifying certificate...
Status: Received 2 certificates from server.
Status: cert[0]: subject='C=SE,L=Vasteras,O=Loopia AB,CN=*.loopia.se' issuer='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert SHA2 High Assurance Server CA'
Status: cert[1]: subject='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert SHA2 High Assurance Server CA' issuer='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert High Assurance EV Root CA'
Command: USER ansurwebb
Reply: 331 User ansurwebb OK. Password required
Command: PASS ***************
Reply: 230 OK. Current restricted directory is /
Command: SYST
Reply: 215 UNIX Type: L8
Command: FEAT
Reply: 211-Extensions supported:
Reply: EPRT
Reply: IDLE
Reply: MDTM
Reply: SIZE
Reply: MFMT
Reply: REST STREAM
Reply: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Reply: MLSD
Reply: AUTH TLS
Reply: PBSZ
Reply: PROT
Reply: UTF8
Reply: ESTA
Reply: PASV
Reply: EPSV
Reply: SPSV
Reply: ESTP
Reply: 211 End.
Command: PBSZ 0
Reply: 200 PBSZ=0
Command: PROT P
Reply: 200 Data protection level set to "private"
Command: PWD
Reply: 257 "/" is your current location
Status: Current path is /
Command: TYPE I
Reply: 200 TYPE is now 8-bit binary
Command: PASV
Reply: 227 Entering Passive Mode (194,9,94,127,209,238)
Command: MLSD
Status: Data connection established, performing TLS handshake...
Reply: 150 Accepted data connection
Status: TLS handshake successful, verifying certificate...
Status: Received 2 certificates from server.
Status: cert[0]: subject='C=SE,L=Vasteras,O=Loopia AB,CN=*.loopia.se' issuer='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert SHA2 High Assurance Server CA'
Status: cert[1]: subject='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert SHA2 High Assurance Server CA' issuer='C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert High Assurance EV Root CA'
Status: TLS session of transfer connection has been resumed.
Listing: type=cdir;sizd=4096;modify=20161108074844;UNIX.mode=0700;UNIX.uid=80;UNIX.gid=80;unique=3a00ff19g6635b72; .
Listing: type=pdir;sizd=4096;modify=20161108074844;UNIX.mode=0700;UNIX.uid=80;UNIX.gid=80;unique=3a00ff19g6635b72; ..
Listing: type=dir;sizd=4096;modify=20161108074844;UNIX.mode=0750;UNIX.uid=80;UNIX.gid=80;unique=3a00ff19g678d3f0; old***''
Listing: type=dir;sizd=4096;modify=20170325083846;UNIX.mode=0755;UNIX.uid=80;UNIX.gid=0;unique=3a00ff19g6635b73; public_html
Reply: 226-Options: -a -l
Reply: 226 4 matches total
Status: Success

[Tim Kosse]

You have malware on your machine that modifies FTP traffic.