ftp server problem

[Marco_113]

hi all,
i' have a problem with my internal ftp server.
I connect from outside to the server, i'm able to get login and password authentication, but i can't give any commands;
i can only change the directory but i cannot see the files and cannot get nothing.
The output from the server if i give the ls commmand is:

Possible PASV port theft, cannot open data connection.

Thanks in advance

[Cheryl Griffin]

What is in your ftpaccess file?

See
http://www.landfield.com/wu-ftpd/mail-archive/wuftpd-questions/2001/Dec/0130.html

[Johannes Krackowizer_1]

Hi,

is there any firewall between you and the ftp-server are there any ports or ip's translateted (nat)?

[vetriselvan s]

Hello

the following article is good

[UCX-VMS] FTP Troubleshooting Steps
http://h18000.www1.hp.com/support/asktima/communications/009954C2-2C5E74C7-1C007A.html


if u have firewall
The Problem is always about the FTP issue, either they
can not ftp the file, or they only can receive file properly but not
sending file properly, or they logged in FTP Server and after that they
disconnected by Server.

Try to disable temporary the firewalls (one at a time or both at the same time) and see what happens...
It looks like firewall issue. Also check number of simultaneous connection allowed through tunnel.

thanks,

[Marco_113]

The ftp server is a Windows 2000 system;
it has a private IP and is protected with a Linux Iptables firewall.
The firwall use a NAT to the server on the 21 port.

1)From Internet (ftp client)to the ftp server is allowed the "New connection" on port 21;
2)from Ftp server are allowed the connection established from Internet.

3) From ftp server to Internet (ftp client) is allowed "new connection" on port 20
4) From Internet are allowed connection established

5) Really from ftp are allowed new connection to Internet without restriction on ports number.

Thanks.

[Johannes Krackowizer_1]

Hi Marco,

could you log the packets that aren't allowed to go through your firewall with iptables -j LOG

[Marco_113]

thanks,
i've already solved my problem
bye