FTP on non standard high port failing on Genius

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › FTP on non standard high port failing on Genius

1 | 2

gzt

18756 posts

Uber Geek
+1 received by user: 7886

Lifetime subscriber

#714949 9-Nov-2012 21:46

Tried setting your external ip address manually in the active mode options?

Eule

40 posts

Geek
+1 received by user: 1

#714956 9-Nov-2012 21:50

Yes, I have manually specified my external ip address and made sure it still was valid.
I just installed wireshark, haven't used it much before so it might take me some time to make sense of it.

Thanks for the suggestions

Eule

40 posts

Geek
+1 received by user: 1

#714957 9-Nov-2012 21:51

ubergeeknz: I'm stumped TBH. I'll see if I can do some testing with this and let you know.

From the log it appears like you may not have specified the correct external IP within Filezilla.

>> 18:09:48 Response: 425 Sorry, invalid address given

it can change (not fixed like it used to be) so be aware of that.

Yes have done that.
It would be great if you could look into that.

Cheers

ubergeeknz

3344 posts

Uber Geek
+1 received by user: 1041

Trusted

Vocus

#714960 9-Nov-2012 22:10

I'll try but I can't make any guarantees... I imagine that FTP is handled by an ALG when it's on the standard port. Using very high ports like that is pretty unusual :)

Eule

40 posts

Geek
+1 received by user: 1

#715068 10-Nov-2012 10:50

I have a bit more information after using wireshark to see what is happening.

Initailly there is some TCP SYN ACK handshaking happening

MyPcIp:59947 - FtpServerIp:53421 [SYN]
FtpServerIp:53421 - MyPcIp:59947 [SYN, ACK]
MyPcIp:59947 - FtpServerIp:53421 [ACK]

After that I should get get a 220 Welcome message from the ftp server, like this:

FtpServerIp:53421 - MyPcIp:59947 Response 220 Welcome

But I get

FtpServerIp:53421 - MyPcIp:59947 425 Sorry invalid address given.

I am very new to wireshark, so not sure how to interpret the TCP handshaking and whether everything is going fine there. Is there anything to look out for?

So it seems like I don't even get the welcome message
This is what filezilla gives me (debug mode verbose):
10:28:58 Status: Connecting to FtpServerIp:53421...
10:28:58 Status: Connection established, waiting for welcome message...
10:29:01 Trace: CFtpControlSocket::OnReceive()
10:29:01 Response: 425 Sorry, invalid address given
10:29:01 Trace: CControlSocket::DoClose(0)
10:29:01 Trace: CFtpControlSocket::ResetOperation(66)
10:29:01 Trace: CControlSocket::ResetOperation(66)
10:29:01 Error: Could not connect to server
10:29:01 Trace: CFileZillaEnginePrivate::ResetOperation(66)
Any suggestions?

ubergeeknz

3344 posts

Uber Geek
+1 received by user: 1041

Trusted

Vocus

#715530 11-Nov-2012 20:32

Check this:

http://www.whatastruggle.com/425-sorry-invalid-address-given

Based on this message, it may be this is nothing to do with Genius but the fact that you've gone to a different IP address pool and reverse DNS isn't working the way the FTP server expects.

You can try your old modem if you want to rule it out completely. It should be able to work if you enter the DSL credentials (but you won't get VoIP service).

HTH!

Samsung

Shop now on Samsung phones, tablets, TVs and more (affiliate link).

Eule

40 posts

Geek
+1 received by user: 1

#715633 12-Nov-2012 07:06

ubergeeknz: Check this:

http://www.whatastruggle.com/425-sorry-invalid-address-given

Based on this message, it may be this is nothing to do with Genius but the fact that you've gone to a different IP address pool and reverse DNS isn't working the way the FTP server expects.

You can try your old modem if you want to rule it out completely. It should be able to work if you enter the DSL credentials (but you won't get VoIP service).

HTH!

Hi, thanks for that link.
I am not quite sure if I understand the underlying cause here. I noticed that my new IP address is very different to my previous one. Saying that, I don't understand why the ftp server needs to resolve anything. I thought it would see only my IP address anyway not a domain name.

If I interpret this correct the --dontresolve has to be done on the server side. I will send this information to the server host.

Thanks

1080p

1332 posts

Uber Geek
+1 received by user: 152
Inactive user

#715657 12-Nov-2012 09:12

Seriously... sftp. Zero hassles and works in multiple current FTP clients.

Eule

40 posts

Geek
+1 received by user: 1

#715666 12-Nov-2012 09:28

1080p: Seriously... sftp. Zero hassles and works in multiple current FTP clients.

You are right of course. But sometimes this is not an option.
Anyway I am close to giving up on this. If I don't hear back from the FTP server host I will not pursue this any further.

But I learned a few things about NAT, DMZ and wireshark, so the time spend wasn't completely wasted.
If I get any further in this I will let you know. Otherwise thanks a lot for the help and advice.

There is a few other things I want to try with the genius so I will probably be back asking questions.

Cheers

ptinson

677 posts

Ultimate Geek
+1 received by user: 27

Trusted

#716717 13-Nov-2012 21:43

It looks like you are on a range we havent added reverse records for yet.
Dont know if that will fix it but the reverses are being setup at the moment.

Once done for the range you are on ill let you know if you feel so inclined to test again.

Paul

meat popsicle

Eule

40 posts

Geek
+1 received by user: 1

#716840 14-Nov-2012 09:15

ptinson: It looks like you are on a range we havent added reverse records for yet.
Dont know if that will fix it but the reverses are being setup at the moment.

Once done for the range you are on ill let you know if you feel so inclined to test again.

Paul

Hi, thanks a lot for this information. This might the problem. It seems that some FTP servers use the reverse ip lookup comparison to the DNS of that domain name as a sanity check. If it doesn't match or return a result is will send "425 Sorry, invalid address given" response.

I will wait till I hear back from you and then test again.

Cheers

Mighty Ape

Shop now at Mighty Ape (affiliate link).

Eule

40 posts

Geek
+1 received by user: 1

#717452 15-Nov-2012 07:35

ptinson: It looks like you are on a range we havent added reverse records for yet.
Dont know if that will fix it but the reverses are being setup at the moment.

Once done for the range you are on ill let you know if you feel so inclined to test again.

Paul

Hi Paul

Since yesterday evening my ftp connection started working again

. I assume that you have added the reverse records and that would have fixed it. Maybe you can confirm.

So that solved my problem. Thanks a lot for your help. It was a bit of an obscure error.

Cheers

ptinson

677 posts

Ultimate Geek
+1 received by user: 27

Trusted

#717495 15-Nov-2012 09:27

Yes it was done yesterday afternoon.
Its not quite how i want it.

Glad its working for you now though.

We will try not to break it again:)

Paul

meat popsicle

1 | 2