FZServer: Wrong binding on multihomed machine

[grayhat]

Configuration:

Multihomed windows machine, IP 1.2.3.4 and 1.2.3.5

Filezilla server 0.9.1b, configured to listen on 1.2.3.5 and
to use 1.2.3.5 for PASV too

Problem:

opening an ftp (active) session to 1.2.3.5:21 works and
the logon completes successfully, but trying to retrieve
bombs with a "425 Can't open data connection" error

running a "netstat -an" on the machine running FZserver
shows the 1.2.3.5:21 in ESTABLISHED state but also
shows some 1.2.3.4:20 in TIME_WAIT state, this seems
to indicate that FZServer isn't using the correct IP for
the data channel when running on a multihomed system
even if it has been configured to use a particular IP
a confirm is the fact that using PASV solves the issue
since in that case the FZserver will be forced to use the
correct IP address

[grayhat]

Note:

opening an ftp (active) session to 1.2.3.5:21 works and
the logon completes successfully, but trying to retrieve
bombs with a "425 Can't open data connection" error

should read:

opening an ftp (active) session to 1.2.3.5:21 works and
the logon completes successfully, but trying to retrieve
a directory listing or in any case to use the data chan
bombs with a "425 Can't open data connection" error

sorry

[Tim Kosse]

This bug report has been closed due to inactivity and has possibly
already been solved.

You can reopen this report if the issue still exists in the
latest version of FileZilla (Server).