Skip to main content
axel_sib
axel_sib
New Member
October 2, 2014
Question

RESOLVED - [FORTIGATE 60B] Filezilla Server - 425 can' t open data connection

  • October 2, 2014
  • 2 replies
  • 33017 views
Hello ! So i' want to configure a FTP server on my windows 2008R2. The connection between the client and the FTP server is successful but the data cannot be retrieve. In the passive mode settings, i use the port range : 50000 - 50100, but I don' t really know where and how to configure that in my Fortigate 60B. Here is the log from filezilla : 
(000953)2/10/2014 09:23:05 - admin (91.183.220.172)> 425 Can' t open data connection for transfer of " /"   (000953)2/10/2014 09:23:11 - admin (91.183.220.172)> disconnected.  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> Connected on port 2121, sending welcome message...  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> 220-FileZilla Server version 0.9.47 beta  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> 220 Please visit https://filezilla-project.org/  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> USER admin  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> 331 Password required for admin  (000954)2/10/2014 09:23:11 - (not logged in) (91.183.220.172)> PASS ******  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> 230 Logged on  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> PWD  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> 257 " /"  is current directory.  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> TYPE I  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> 200 Type set to I  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> PORT 192,168,8,172,194,206  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> 200 Port command successful  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> MLSD  (000954)2/10/2014 09:23:11 - admin (91.183.220.172)> 150 Opening data channel for directory listing of " /"   (000954)2/10/2014 09:23:21 - admin (91.183.220.172)> 425 Can' t open data connection for transfer of " /"
Does anyone know how to fix that ?

    2 replies

    netmin
    netmin
    New Member
    October 2, 2014
    Hi Axel (and welcome), 2 potential issues: you are using a custom FTP port (2121), which is potentially not seen by the FTP session helper, that can be configured in the CLI: config system session-helper Your FTP client requested ACTIVE FTP, not passive FTP - maybe you can change this for a quick test to passive mode. With Active FTP, the client offers via PORT command a high port (in your case 49870) the server may connect to from FTP server port-1, so normally port 20 (might be port 2120 in your case), if FZ server does the same. Something like ... server:2120->client:49870 _or_ server:20->client:49870 Potentially, the client side blocks inbound access when using active FTP. With passive FTP, the client requests via PASV command a high port from the server it can connect to.
    axel_sib
    axel_sibAuthor
    New Member
    October 2, 2014
    Hey, Thanks a lot, your command " config system session-helper" give me a hint. Now it works =) ! here is what I did : 
    XLGroup # config system session-helper         XLGroup (session-helper) # edit 21    new entry ' 21'  added         XLGroup (21) # set name ftp         XLGroup (21) # set port 2121         XLGroup (21) # set protocol 6         XLGroup (21) # next         XLGroup (session-helper) # end
    Terms & ConditionsAccessibility statement