passive ftp problem


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers passive ftp problem
# 1  
Old 08-22-2005
Question passive ftp problem

Hello!

Im having a strange problem. Im getting "Possible PASV port theft, cannot open data connection" when i try to ftp from one machine to another.
This dosent happen everytime, only once in a while. Ive checked the firewall, and everything is open betwen client -> server, no restrictions
How do i solve this?

Client=Solaris 8 Sparc, using standard solaris ftp client.
Server=solaris 9 Sparc, Using standard solaris ftpd

Regards...
dOzY
# 2  
Old 08-22-2005
This is very odd indeed. That does not seem to be a Solaris error message. I searched the Solaris source code for the word "theft" and I got no hits. Looking through the ftpd source code, it looks like the Solaris ftpd does not check for this condition. There is a macro called FIGHT_PASV_PORT_RACE which is set to 1 to enable the test, but that macro is never checked again. This means that I don't really know where to go from here. Smilie

I have heard of this error from other ftp servers. Let me describe what happens when they correctly issue this complaint. You connect to the ftp server and establish a control connection. The ftp server can then make a note of the source IP address. Your client switches into passive mode automatically. Then you request a file transfer. The ftp server sets up a port for your client to connect to. This second connection is the data connection. When the connection is established, the server can look at the source IP address. The ftp server expects that the same IP address should originate both connections. If that data connection seems to come from a different IP address than the control connection, the ftp server issues this error message. This behavior closes a security hole opened by the use of passive ftp. There is generally some way to disable this check, but it may involve a recompile. All of this implies that you somehow used a different source IP address for the two connections. Is that possible?

I can't imagine why you're seeing that message. I guess that a very active firewall might be able to do that, so check your firewall. Other than that, it beats me.
 
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. Debian

Pure-ftpd, passive mode, tls

Hello everyone, Could you please help me with settings of pure-ftpd. Here is my actual solution: I have got linux (debian 7.1 wheezy ), where I run pure-ftpd, created virtual users, folder for ftp. I also install openssl, create private certificate for tls. All seems good. ... (3 Replies)
Discussion started by: sedlis
3 Replies

2. IP Networking

vsftp | active and passive ftp | iptables

I am using vsftp but I can't login with passive mode. I can only login with active mode. I can login with both mode when service of iptables is stop. In active mode : 20,21 must be open from server site. 1023 and over must be open at client site. In passive mode : only 21,1023 and over must be... (1 Reply)
Discussion started by: getrue
1 Replies

3. AIX

ftp connect in passive mode , ftp settings

how to connect to ftp server in passive mode? ftp server.abc and how can i see ftp settings, doesn't exist some ftpd.conf there is some other file where i check the options and configurations of ftp server? Thanks (3 Replies)
Discussion started by: prpkrk
3 Replies

4. AIX

AIX HACMP Active/Passive Config

I have a HACMP 6.1 configured in a active/passive. I have 1 NIC with 3 IP address on (Boot, Persistent and Service ) . All address are routable. One of the application on the HA cluster is also using Boot Ip to send application data. Question : Since all the traffic is passing thru the same... (3 Replies)
Discussion started by: mk8570
3 Replies

5. Shell Programming and Scripting

FTP problem !

i have a script that will perform the following steps: 1) FTP to dir a1.Then get the ls -ltr and redirect to file a1.txt 2) FTP to dir b1.Then get the ls -ltr and redirect to file b1.txt 3) FTP to dir c1.Then get the ls -ltr and redirect to file c1.txt What i want is how shall i achieve the... (2 Replies)
Discussion started by: ali560045
2 Replies

6. Shell Programming and Scripting

error while passive ftp file transfer

hi i am doing a passive ftp file transfer . during that i got the following error. "ftp> put FTPS_MAILBOX local: FTPS_MAILBOX remote: FTPS_MAILBOX 421 Service not available, remote server has closed connection Passive mode refused. Turning off passive mode. No control connection for... (1 Reply)
Discussion started by: Satyak
1 Replies

7. Shell Programming and Scripting

problem in FTP

i m able to login to Unix box from window's cmd can anyone tell me how to run a script from window cmd using ftp ? the script is in unix box and i need to run from windows CMD using ftp (2 Replies)
Discussion started by: ali560045
2 Replies

8. UNIX for Dummies Questions & Answers

FTP problem. please help

can someone tell me how I can deal with a problem am having concerning users that are faliing to use one of the shells specified in the /etc/shells file. as a result, am told, these users are bound fail to connect via FTP. i know i goto check the /etc/shells file on the target host but what... (5 Replies)
Discussion started by: TRUEST
5 Replies
Login or Register to Ask a Question