Web Connection
FTP can connect, but cannot download (times out)
Gravatar is a globally recognized avatar based on your email address. FTP can connect, but cannot download (times out)
  Michael B
  All
  Oct 23, 2020 @ 07:09pm

Rick,

My WWWC app is trying to connect to my own FTP server on the 'same' WWWC IIS server. I know I could just access the files directly, but that's not the point. This is something that worked for years without disruption. I am able to use an ftp client from a remote pc to access and download from the same FTP account, but I cannot get my own 'wwwc' function that uses wwFTP client to download.

FTP Server Error is: 25 Can't open data connection for transfer of "/filenamehere.csv"

I made sure that the ftp sever (also filezilla) is not get blocked by the windows firewall and I can confirm that the folder that the ftp server is allowing downloads from has file permissions for the wwwc app.

Lastly, not sure if this matters but I can confirm wwipstuff.dll is latest and greatest.

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Rick Strahl
  Michael B
  Oct 23, 2020 @ 11:45pm

That looks like a locked file.

If you're running FileZilla server, open the server terminal and watch the requests go through - it should give you more information on what's happening on the server itself. Could be that you're trying to connect to ftps:// which isn't supported by wwFtp.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Michael B
  Rick Strahl
  Oct 24, 2020 @ 07:02am

Rick,

As it turned out, there was in fact an ISP firewall in front of the WWWC server that was calling the actual ftp server. Once the WWWC server was removed from the Firewall Group (at vultr.com) it worked again. This was plain ftp not sftp.

I suspect a new range of ports has to be opened on the firewall for the ports that the Filezilla server uses to send the file. Apparently port 21 and 22 is NOT enough to make the ftp send and receive work.

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Rick Strahl
  Michael B
  Oct 24, 2020 @ 02:56pm

I recommend using Passive FTP which will stick to a single port.

Non-Passive requires multiple ports - it'll connect on port 22 and then negotiate the actual permanent connection port. It's faster because of the persistent and dedicated connection but it's much more prone to failure. Passive is the most common protocol and what we should be using most of the time. I only use passive for any FTP connections.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Michael B
  Rick Strahl
  Oct 25, 2020 @ 07:56am

Have you tried to use passive with the vultr firewall? I cannot seem to figure out which ports need to be added to the vultr firewall to get it to work. The only way passive works is to entirely remove the server from the vultr firewall.

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Rick Strahl
  Michael B
  Oct 25, 2020 @ 08:12pm

No I don't use a special firewall beyond the Windows server one. That works fine. Why do you need a separate firewall?

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Michael B
  Rick Strahl
  Oct 26, 2020 @ 05:29pm

Attempting to stop dos attacks and other brute force attacks (on the ftp server). It actually does help quite a bit.

Gravatar is a globally recognized avatar based on your email address. re: FTP can connect, but cannot download (times out)
  Rick Strahl
  Michael B
  Oct 26, 2020 @ 11:44pm

Sure - but whatever those issues are it's the config of the firewall and making sure the ports are open. If you can't remotely configure it, find something that you can run on your box that can.

Windows firewall is fine - just find a restrictive set to apply if you think the defaults are too lose but WS is pretty much locked down these days and you have to explicitly open up everything you actually need.

+++ Rick ---

© 1996-2020