VSFTPD - use PORT or OR PASV first

[dessie1981]

Hi Everyone,

Its my 1st time using vsftp, so please bare with me.

I am trying to set up the server in order for one of our suppliers to ftp a stock file to us.

However when i am testing the connection after logging in as the appropriate user i am getting the message

"use PORT or OR PASV first"

I realise that PASV stands for Passive FTP and that port 21 is only used for control purposes here and that higher ports are use for data transfer.

I am just wondering can anybody help me to default the server to always use passive ftp or always use regular ftp.

Any help would be great

Regards
Dessie

 

[Annihilannic]

What version of vsftpd are you using?

Do you have both pasv_enable and port_enable set to "yes" in vsftpd.conf? If so, try disabling one or the other perhaps to try prevening the user from having to make a choice. I'm just guessing here.

Annihilannic.

 

[dessie1981]

hi,

i am using vsftp 2.0.5

there are no "pasv_enable" "port_enable" options in the config file.

Regards
Dessie

 

[Annihilannic]

Well, according to the man page they both default to "yes", so perhaps disable one or the other?

http://vsftpd.beasts.org/vsftpd_conf.html

Unfortunately I don't have 2.0.5 anywhere convenient to test with.

Annihilannic.

 

[dessie1981]

Hi again,

Here is my vsftpd.conf after i run the command
"grep = /etc/vsftpd.conf"

anonymous_enable=NO
local_enable=YES
write_enable=YES
#local_umask=022
#anon_upload_enable=YES
#anon_mkdir_write_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
#chown_uploads=YES
#chown_username=whoever
#xferlog_file=/var/log/vsftpd.log
#xferlog_std_format=YES
#idle_session_timeout=600
#data_connection_timeout=120
#nopriv_user=ftpsecure
#async_abor_enable=YES
#ascii_upload_enable=YES
#ascii_download_enable=YES
#ftpd_banner=Welcome to blah FTP service.
#deny_email_enable=YES
#banned_email_file=/etc/vsftpd.banned_emails
#chroot_list_enable=YES
#chroot_list_file=/etc/vsftpd.chroot_list
#ls_recurse_enable=YES
listen=yes


Regards
Dessie

 

[Annihilannic]

So try adding "pasv_enable=NO" to the end of the file?

Annihilannic.

 

[dessie1981]

Hi again,

Tried that and restarted the service, still getting the same message :-(

Regards
Dessie

 

[thedaver]

Are you traversing a firewall or using NAT?

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[dessie1981]

Yes it is coming through isa 2003 firewall

Regards
Dessie