10

So here is my problem, I'm absolutely unable to connect to a FTP server, in circumstances I've never seen before. Here is the situation :

  • I get a "Connection timed out" just after the MLSD command.
  • I usually use Filezilla, under Ubuntu, but to make sure the problem isn't related to this particular client I tried a few others : gftp on ubuntu and winscp and freeftp on windows 7. All the same result.
  • Also made sure to try with Active or Passive modes. Same result.
  • At this point I would be inclined to think there is something wrong with my current network (furthermore, according to a coworker the FTP server is OK). But I did check with http://ftptest.net/ and I am able to get the directory listing (which I'm not able to through a FTP client).

So in the end the last thing I didn't tried is to go on another network, solution which seems would work, but wouldn't be very practical in the long run. And thus I guess there's something wrong with my router... but what could it possibly be?

Note : I did try to register and post this question on filezilla's board first... but I can't create an account with a gmail nor hotmail account. WTF?

3
  • For information, we also had the MLSD command problem, but this was not a firewall issue, but too many files in the directory (more than 40 000). Apr 22, 2013 at 15:29
  • I had this problem too. Strangely, the issue resolved after I added the server configuration to the Site Manager and set UNIX as server type.
    – Emiswelt
    May 30, 2014 at 3:34
  • In FileZilla version 3.21, I needed to switch "Only use plain FTP (insecure)" in the connection settings to make it work. I will play with settings on the server now to make it not so "insecure".
    – Miro J.
    Sep 2, 2016 at 22:11

10 Answers 10

7

According to the FileZilla admins, your router is probably the issue (even though you probably can't do anything about it), and they're not going to fix it to fall back to LIST if MLSD times out. See: http://forum.filezilla-project.org/viewtopic.php?f=2&t=11405&start=15

Solution: Try Core FTP or similar. It's unlikely you'll be able to convince the stubborn FileZilla folks to add a (stupidly simple) workaround option- "fall back to LIST if MLSD times out".

Or, since it's open source, see if you or someone else can make the change and compile it yourself. I imagine if you try to submit the change to be added to the official build, they'll reject it, but perhaps we could be pleasantly surprised.

3
  • 1
    Good to know! Gnome Commander connected just fine.
    – styu
    Aug 14, 2014 at 14:11
  • 1
    Wow, what a professional and helpful response in that FileZilla forum: "Stop using your stupid firewall then, it's not part of the FTP protocol."
    – basic6
    Apr 18, 2015 at 14:06
  • +1 for the polite critiquing tone!
    – Miro J.
    Sep 2, 2016 at 21:35
6

After a long search, the solution was simple:

Go to Site Management, choose the site with the problem. Choose tab Transfer Settings and select Active instead of Default.

1
  • This is sort of just moving the problem along though isn't it? The server firewall isn't configured to use passive mode properly, so you're asking it to use active mode and hoping that the client firewall doesn't intercept it. You'd be better off fixing the servers firewall so that properly secured clients (behind a firewall) can access it. Aug 8, 2020 at 12:20
2

I found the problem in Encryption when I changed it to "Only use plain FTP (insecure)" then its working perfectly!

FileZilla is very familiar to me and I need to fight for bugs every update of it.

2
  • Afaik this question wasn't ftp client specific and wasn't windows-specific.
    – peterh
    Apr 2, 2015 at 3:02
  • 1
    Considering disabling TLS is a bad advice. Of course that solves the issue which is caused by TLS use, but this run an insecure connection...
    – Yvan
    Jun 23, 2016 at 8:23
1

I fixed the problem by using a ssh tunnel through one of my personal server. I am absolutely stumped as to why this would work. I'm currently in Japan, and my server in Canada, so perhaps there is an issue with IPv6 address (even though the server says it shouldn't)...?

1

Just want to let people know how I got this working.

With the MLSD timeout the problem can also be in the router.

I got a new Asus router and I forwarded the ports for passive mode wrong. I have a qnap NAS and I connect on port 21 on ftp and port xxxxx:xxxxx in passive mode. In my asus router I set the port forward (virtual server) correctly now and it works again. My FTP is forwarded correctly on port 21 to my NAS IP, just standart stuff. The problem was the passive ports my NAS wanted to use also.

I did this in my port forward section (Virtual Server is it called in ASUS routers):

Service name: Whateveryoulike

Port Range: The passive ports your device will use (standart 55536:56559 for Qnap)

Local IP: The local IP of the device (something like 192.168.0.xxx)

Local Port: LEAVE THIS BLANK

Protocol: Both

Add

Apply

BOOM! We got uplink.

The problem could be something else, but this fixed my timeout and now it all works.

0

If you are connecting to a unix server, and it is running iptables (firewall), then check your iptables config, in /etc/sysconfig/iptable-config, for this line:

IPTABLES_MODULES=""

if it is blank, edit it as follows:

IPTABLES_MODULES="ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ftp"

and reload or restart iptables: service iptables reload (or restart). Now try connecting (with passive mode), and it should work without a problem.

This fixed our problem, in the office, in desktops with Windows 7/8.1, behind a NAT, and connecting with WinSCP 5.5.3 to a production server running CentOS 6.6 x86_64, Plesk 12 and ProFTPd.

You should not need to make any crazy setting in your ftp client.

Cheers, Michael.

PS: You will need SSH access for this, and root permissions.

0

Like others, i've wasted a lot of time with this issue.

I have now fixed the problem.

I used FireFTP (a free Firefox add-on) and it worked seamlessly, first time.

One thing i noticed was that FireFTP defaulted to Port 21.

On the other hand, FileZilla did not allow the Port box to be filled in (it would default back to blank). Perhaps that was part of the problem.

I tried all the things mentioned previously (change to Active, allow Filezilla past the Firewall, etc) and none worked for me (I have Windows 10).

0

Was easily fixed by entering on Filezila

Edit--->Settings--->Passive mode settings

Change to "Follow the Following IP: Enter your external static IP

-1

I had the same issue, trying to connect via Quick connect on port 2222. Then I used Site Manager with the settings below and no more error:

  • port 2222
  • protocol SFTP
  • Logon type Normal
  • user and pass

Then, connecting via the site manager went through immediately.

-3

It's preaty simple!

You must add a firewall exeption for Fillzilla (or any client you use).

(If it doesn't work, it may be something about the firewall or port forward of your router.)

PS: Changing the mode of your connection to active can be a trick, but it's not the "best practice solution". ;-)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .