The Setup: Server 2008 R2 Enterprise with IIS 7.5 Home connection with dynamic external IP
The Goal: Encrypted passive ftp server with AD integration no client side adjustments (save making sure to use ftpes in their client)
The Problem: I'm running on a home connection with a dynamic external IP and the firewall is apparently doing something screwy
What Happens: It works intermittently (its broken more often than not) The control ports seem to work fine but not the data ports, because it can contact authenticate and its gets all the way to the point where its supposed to pull the Virtual directory
Dump of FileZilla console follows(identifying info is edited):
Status: Resolving address of xxxxx.dyndns.org
Status: Connecting to 18.104.22.168:21...
Status: Connection established, waiting for welcome message...
Response: 220 Microsoft FTP Service
Command: AUTH TLS
Response: 234 AUTH command ok. Expecting TLS Negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command: USER topherhead
Status: TLS/SSL connection established.
Response: 331 Password required for topherhead.
Command: PASS ********
Response: 230-[[welcome message is usually here]] site 222222
Response: Directory has 624,490,864,640 bytes of disk space available.
Response: 230 User logged in.
Response: 215 Windows_NT
Response: 211-Extended features supported:
Response: LANG EN*
Response: AUTH TLS;TLS-C;SSL;TLS-P;
Response: PROT C;P;
Response: REST STREAM
Response: 211 END
Command: OPTS UTF8 ON
Response: 200 OPTS UTF8 command successful - UTF8 encoding now ON.
Command: PBSZ 0
Response: 200 PBSZ command successful.
Command: PROT P
Response: 200 PROT command successful.
Status: Retrieving directory listing...
Response: 257 "/" is current directory.
Command: TYPE I
Response: 200 Type set to I.
Response: 227 Entering Passive Mode (123,123,123,123,253,199).
Response: 150 Opening BINARY mode data connection.
Error: GnuTLS error -53: Error in the push function.