Opened 15 years ago
Last modified 15 years ago
#3500 closed Bug report
Active Mode Failiures
|Reported by:||shujaat_tariq||Owned by:||Alexander Schuch|
|Keywords:||Cc:||shujaat_tariq, Alexander Schuch, Tim Kosse|
|Component version:||Operating system type:|
|Operating system version:|
The GUI shows the active mode been set with the correct external IP address but still teh server replies with the internal ip address (LAN IP) of the client and says cannot establish connection. On checking through a Packet Sniffer it can be seen that filezilla is actually sending the LAN IP altough in the console/log/gui it shows its sending the external IP.
Issue with 22.214.171.124
and also with 126.96.36.199 - nightly build
Change History (4)
comment:1 by , 15 years ago
comment:2 by , 15 years ago
The wizard fails the active mode configuration, with this in the end
Response: 501 IP Mismatch. Tainted by router or firewall.
PORT command tainted by router or firewall.
but the thing is after the wizard finishes and a normal connection is made filezilla still tries to connect using active mode showing its using the external IP but if i run a packet sniffer it shows me that filezilla is infact sending the local IP.
here are the logs...
From the GUI (xx.xxx.xxx.xxxx is my external ip and is correct)
Status: Resolving IP-Address for emiratesresidence.com
Status: Connecting to 188.8.131.52:21...
Status: Connection established, waiting for welcome message...
Response: 220---------- Welcome to Pure-FTPd [TLS] ----------
Response: 220-You are user number 2 of 50 allowed.
Response: 220-Local time is now 02:27. Server port: 21.
Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: USER emirates
Response: 331 User james_bond OK. Password required
Command: PASS *
Response: 230-User james_bond has group access to: james_bond
Response: 230 OK. Current restricted directory is /
Response: 215 UNIX Type: L8
Response: 211-Extensions supported:
Response: REST STREAM
Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response: AUTH TLS
Response: 211 End.
Status: Retrieving directory listing...
Response: 257 "/" is your current location
Command: TYPE I
Response: 200 TYPE is now 8-bit binary
Command: PORT xx,xxx,xxx,xxx,39,156
Response: 500 I won't open a connection to 192.168.0.5 (only to xx.xxx.xxx.xxx)
Response: 227 Entering Passive Mode (69,93,152,125,86,131)
Response: 150 Accepted data connection
Response: 226-Options: -a -l
Response: 226 31 matches total
Here is from the packet sniffer (here again xx.xxx.xxx.xxx is my external ip and is fine.. but it never gets sent)
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 2 of 50 allowed.
220-Local time is now 02:27. Server port: 21.
220 You will be disconnected after 15 minutes of inactivity.
331 User emirates OK. Password required
230-User james_bond has group access to: james_bond
230 OK. Current restricted directory is /
215 UNIX Type: L8
257 "/" is your current location
200 TYPE is now 8-bit binary
500 I won't open a connection to 192.168.0.5 (only to xx.xxx.xxx.xxx)
227 Entering Passive Mode (69,93,152,125,86,131)
150 Accepted data connection
226-Options: -a -l
226 31 matches total
comment:3 by , 15 years ago
Not a bug in FileZilla. Please read http://wiki.filezilla-project.org/Network_Configuration and configure your routers and firewalls accordingly.
comment:4 by , 15 years ago
well i am running the packet sniffer on same pc. What is confusing me is that the GUI log is showing the filezilla sent my external ip and port to the server, but the packet sniffer is showing its sending my local ip... (btw in the settings of filezilla client i have specified/forced my IP)
I am running the packet sniffer on teh same pc so i am sure its not being mangled or altered in anyway by the firewall.. cause the firewall applies after the data leaves my computer (the firewall is on teh gateway).... and the sniffer sees the data before it .....
and secondly the firewall is bascially a very simple set of IP tables rules just blocking a few ports and not mangling anything...
Can you please attach a log? Does the Network Configuration Wizard work for you in active mode?