Problem Making SSL Connection

Bud~Man

2005-11-24 15:40:36

I have a computer that I am using as a web server. It has Apache2 and Pure-FTPD installed. The system is running FreeBSD 5.4 for an OS. I have configured Pure-FTPD for SSL. The certificates, etc are all in place.

I have two other computers that are running WinXP PRO with all applicable updates. When I use SmartFTP to connect to the server in plain FTP, everything works fine, but if I try to use FTP over SSL (Explicit), the connection times out. I have followed the directions given on the Pure-FTPD site to the letter. I just cannot seem to understand what is wrong here.

This is my system info as supplied by SmartFTP.

+- System -----------------------------
Microsoft Windows XP Professional
Service Pack 2 (Build 2600)

CPU Speed : 3056 MHz
Total Memory : 523264 KB
Free Memory : 108828 KB

+- SmartFTP ---------------------------
Version : 1.5.990.27
Time Stamp : 2005-10-23 02:50:57

+- Application DLL --------------------
Controls.dll : 1.6.990.27
sfFTPLib.dll : 1.5.7.2
SmartHook.dll : 1.0.2.1

+- Language ---------------------------
SmartFTP.exe : 1.5.990.27

+- System DLL -------------------------
unicows.dll : 1.0.4018.0
shell32.dll : 6.00.2900.2763 (xpsp_sp2_gdr.050922-1642)
shlwapi.dll : 6.00.2900.2753 (xpsp_sp2_gdr.050902-1326)
comctl32.dll : 6.0 (xpsp_sp2_rtm.040803-2158)
riched20.dll : 5.30.23.1221
schannel.dll : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)

+- Internet Explorer ------------------
Version : 6.0.2900.2180

+- Winsock ----------------------------
Winsock : 2.2

This is a copy of the log on my last attempt to connect.

SmartFTP v1.5.990.27
Resolving host name "www2.seibercom.net"
Connecting to 216.45.217.148 Port: 21
Connected to www2.seibercom.net.
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 10:17. Server port: 21.
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
AUTH TLS
234 AUTH TLS OK.
Connected. Exchanging encryption keys...
Session Cipher: 128 bit RC4
TLS encrypted session established.
PBSZ 0
200 PBSZ=0
USER xxx
331 User xxx OK. Password required
PASS (hidden)
230-User xxx has group access to: wheel xxx
230 OK. Current directory is /usr/home/xxx
SYST
215 UNIX Type: L8
FEAT
211-Extensions supported:
EPRT
IDLE
MDTM
SIZE
REST STREAM
MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
MLSD
ESTP
PASV
EPSV
SPSV
ESTA
AUTH TLS
PBSZ
PROT
211 End.
Detected Server Software: PureFTPd
PWD
257 "/usr/home/xxx" is your current location
TYPE I
200 TYPE is now 8-bit binary
PROT P
534 Fallback to [C]
PROT C
200 OK
PASV
227 Entering Passive Mode (192,168,0,4,229,4)
Opening data connection to 192.168.0.4 Port: 58628
MLSD
0 bytes transferred. (N/A/s) (0 ms)
Timeout (60s).
Active Help: https://www.smartftp.com/support/kb/74
Client closed the connection.
Automatic failover of data connection mode from "Passive Mode (PASV)" to "Active Mode (PORT)".

I have X'd out my user name for security reasons. I would appreciate any assistance available.

Aokromes

2005-11-24 16:21:16

Hi, ![[[TRYPASVPORT][/TRYPASVPORT]][/[TRYPASVPORT][/TRYPASVPORT]]][/[[TRYPASVPORT][/TRYPASVPORT]][/[TRYPASVPORT][/TRYPASVPORT]]]

Bud~Man

2005-11-24 17:30:50

KB: How To switch between Active / Passive mode

Hi, Try to change the data connection method from Passive Mode (PASV) to Active Method (PORT) or vice versa. For more information please see the KB article [/<a href=/support/kb/how-to-switch-between-active-passive-mode-f1.html>KB: How To switch between Active / Passive mode.

That failed also. This is the log output.

SmartFTP v1.5.990.27
Resolving host name "www2.seibercom.net"
Connecting to 216.45.217.148 Port: 21
Connected to www2.seibercom.net.
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 12:27. Server port: 21.
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
AUTH TLS
234 AUTH TLS OK.
Connected. Exchanging encryption keys...
Session Cipher: 128 bit RC4
TLS encrypted session established.
PBSZ 0
200 PBSZ=0
USER xxx
331 User xxx OK. Password required
PASS (hidden)
230-User xxx has group access to: wheel xxx
230 OK. Current directory is /usr/home/xxx
SYST
215 UNIX Type: L8
FEAT
211-Extensions supported:
EPRT
IDLE
MDTM
SIZE
REST STREAM
MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
MLSD
ESTP
PASV
EPSV
SPSV
ESTA
AUTH TLS
PBSZ
PROT
211 End.
Detected Server Software: PureFTPd
PWD
257 "/usr/home/xxx" is your current location
TYPE I
200 TYPE is now 8-bit binary
PROT P
534 Fallback to [C]
PROT C
200 OK
Connecting to IP Repeater "http://repeater.smartftp.com:443/" ...
IP Repeater returned: "64.233.173.67"
PORT 64,233,173,67,7,214
500 I won't open a connection to 64.233.173.67 (only to 216.45.217.148)
Automatic failover of data connection mode from "Active Mode (PORT)" to "Passive Mode (PASV)".
PROT P
534 Fallback to [C]
PROT C
200 OK
PASV
227 Entering Passive Mode (192,168,0,4,98,13)
Opening data connection to 216.45.217.148 Port: 25101
MLSD
A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

Aokromes

2005-11-24 17:42:07

Hi, try to change the port ip mode (under you have changed pasv to port) from auto to local.

Bud~Man

2005-11-24 17:53:44

Aokromes

2005-11-24 18:16:38

Bud~Man

2005-11-24 18:57:30

OK, I ended up changing all of the connections to clear, and this is what I got back:

SmartFTP v1.5.990.27
Resolving host name "www2.seibercom.net"
Connecting to 216.45.217.148 Port: 21
Connected to www2.seibercom.net.
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 6 of 50 allowed.
220-Local time is now 13:50. Server port: 21.
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
AUTH TLS
234 AUTH TLS OK.
Connected. Exchanging encryption keys...
Session Cipher: 128 bit RC4
TLS encrypted session established.
PBSZ 0
200 PBSZ=0
USER xxx
331 User xxx OK. Password required
PASS (hidden)
230-User xxx has group access to: wheel ges
230 OK. Current directory is /usr/home/ges
SYST
215 UNIX Type: L8
FEAT
211-Extensions supported:
EPRT
IDLE
MDTM
SIZE
REST STREAM
MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
MLSD
ESTP
PASV
EPSV
SPSV
ESTA
AUTH TLS
PBSZ
PROT
211 End.
Detected Server Software: PureFTPd
PWD
257 "/usr/home/xxx" is your current location
PROT C
200 OK
CCC
500 Unknown command
TYPE I
200 TYPE is now 8-bit binary
PASV
227 Entering Passive Mode (192,168,0,4,204,6)
Opening data connection to 216.45.217.148 Port: 52230
MLSD
A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Timeout (60s).
Active Help: https://www.smartftp.com/support/kb/74
Client closed the connection.
Automatic failover of data connection mode from "Passive Mode (PASV)" to "Active Mode (PORT)".

This is getting to be more of a problem than it is worth.