ftp to public IP problem

[Brian Lee_4]

I can ftp from one server to another one in same subnet.
However, it doesn't work when I tried to do ftp to ftp site in public.
I asked network guy if ftp port is disabled in firewall but he said that outgoing ftp is open.
I can ftp to the same ftp site from other servers in the same subnet.

# ftp ftp.sprintspectrum.com
ftp: connect: Connection timed out

Please help me out.

[Ivan Ferreira]

Try to ftp to another server on the public Internet like ftp.hp.com.

The error:

ftp: connect: Connection timed out

may be a problem with the ftp server that you want to connect, it may be down.

[Brian Lee_4]

I can ftp to the target ftp site from other servers. Only this server can't connect to it.

[Brian Lee_4]

I can ftp to the target ftp site from other servers in the same subnet. Only this server can't connect to it. I can't ftp to none of ftp sites in public from this server.
However, I can ftp to other servers in the same subnet.

[Ivan Ferreira]

I think that you have a problem with the default gateway configuration or name resolution. Check /etc/resolv.conf and your default gateway with netstat -nr.

[Brian Lee_4]

They are configured correctly.

#nslookup ftp.sprintspectrum.com
Using /etc/hosts on: bwserver
looking up FILES
Trying DNS
Non-authoritative answer:
Name: ftp.sprintspectrum.com
Address: 207.40.188.15

# netstat -rn
Routing tables
Destination Gateway Flags Refs Interface Pmtu
127.0.0.1 127.0.0.1 UH 0 lo0 4136
105.1.11.22 105.1.11.22 UH 0 lan2 4136
105.1.11.0 105.1.11.22 U 2 lan2 1500
127.0.0.0 127.0.0.1 U 0 lo0 0
default 105.1.11.1 UG 0 lan2 0

I tried with IP address but it didn't work, either.
I am really lost.

[Ivan Ferreira]

What do you get if you connect to the 21 port via telnet?

# telnet ftp.sprintspectrum.com 21

What is the status of the connection on netstat -n when you do that?

I think that you should double check with your firewall guy the configuration. If you can ftp to any server on the lan, but you cannot on the Internet, and your gateway is correct, is most likely a firewall problem.

[Vladimir Fabecic]

Please post output of:
# traceroute ftp.sprintspectrum.com
and
# traceroute 207.40.188.15

Can you ping (or telnet) your default router?
Did you ask your network poeple is everything OK with port on network switch (where your alpha server is connected)?

[Al Licause]

Also try running tcpdump on ports 20 and 21 from the system on which you are trying to ftp from. This should show how far it's getting
and if it's actually talking to the correct end system.