View Single Post
Old 08-23-2002, 10:08 AM  
ultrahive
Junior Member
 
Join Date: Aug 2002
Posts: 1
Post 425 Possible PASV port theft, cannot open data connection.

Hello All,

My first big problem ever with FlashFXP! I hop you can help me out.

The Logfile:

[16:43:29] Connecting to NLMstr2002
[16:43:29] Connected to da1.****.net Port 24863
[16:43:29] Ident Request: 193.**.12.***
[16:43:30] 220--> Please login with user anonymous or ftp to access our archive <-
[16:43:30] 220-
[16:43:30] 220 ftp.abcd.nl FTP server ready.
[16:43:30] USER sonichive
[16:43:30] 331 Guest login ok, send your complete e-mail address as password.
[16:43:30] PASS (hidden)
[16:43:30] 230-
[16:43:30] 230-
[16:43:30] 230- Archive ftp.abcd.nl
[16:43:30] 230-
[16:43:30] 230-Welcome to the ftp.abcd.nl archive, which now resides on a
[16:43:30] 230-couple of SUN Ultraservers running Solaris.
[16:43:30] 230-
[16:43:30] 230-You are user number 16 out of a possible total of 500 in your class.
[16:43:30] 230-
[16:43:30] 230-You may now also use WWW (http://ftp.abcd.nl/) or e-mail to
[16:43:30] 230-ftpmail@ftp.abcd.nl to access this archive. See README.access.methods
[16:43:30] 230-for more info on this.
[16:43:30] 230-
[16:43:30] 230-This system may be used 24 hours a day, 7 days a week. The local
[16:43:30] 230-time is Fri Aug 23 16:43:24 2002.
[16:43:30] 230-
[16:43:30] 230-All transfers are logged with your host name and whatever you entered
[16:43:30] 230-for the password.
[16:43:30] 230-
[16:43:30] 230 Guest login ok, access restrictions apply.
[16:43:30] SYST
[16:43:30] 215 UNIX Type: L8
[16:43:30] REST 100
[16:43:30] 350 Restarting at 100. Send STORE or RETRIEVE to initiate transfer.
[16:43:30] REST 0
[16:43:31] 350 Restarting at 0. Send STORE or RETRIEVE to initiate transfer.
[16:43:31] PWD
[16:43:31] 257 "/" is current directory.
[16:43:31] TYPE A
[16:43:31] 200 Type set to A.
[16:43:31] PASV
[16:43:31] 227 Entering Passive Mode (194,**,**,20,175,104)
[16:43:31] LIST
[16:43:31] 425 Possible PASV port theft, cannot open data connection.
[16:44:20] QUIT
[16:44:20] 221-You have transferred 0 bytes in 0 files.
[16:44:20] 221-Total traffic for this session was 2962 bytes in 0 transfers.
[16:44:20] 221-Thank you for using the FTP service on ftp.abcd.nl.
[16:44:20] 221 Goodbye.
[16:44:20] Logged off: NLMstr2002

====

As you can read, 425 Possible PASV port theft, cannot open data connection. Im wondering what this could be.

This is the only site I'm having problems with. I have a 512 kbit/s modem. No router, nor ICS. just a normal cable modem.

with not passive on. (active mode) I got this error
====

[16:51:29] 257 "/" is current directory.
[16:51:29] TYPE A
[16:51:29] 200 Type set to A.
[16:51:29] PORT 62,**,**,**,5,15
[16:51:30] 500 Illegal PORT Command
[16:51:30] LIST
[16:51:30] 425 Can't build data connection: Connection refused.
[16:51:46] QUIT
[16:51:46] 221-You have transferred 0 bytes in 0 files.
[16:51:46] 221-Total traffic for this session was 2953 bytes in 0 transfers.
[16:51:46] 221-Thank you for using the FTP service on ftp.acbde.nl
[16:51:46] 221 Goodbye.

====


My conclusions: I'm getting the same error as I would get when having a badly configured firewall, router or ICS setup. but this doesn't apply on my case.

I would like to know how I could handle this problem. How to find step by step out who's blocking my data streams.

Refers:
http://www.slacksite.com/other/ftp.html#summary (active passive)
http://www.smart*ftp.com/support/kb/?a=view&id=59 (425)

FlashFXP 1.4 (build 800)

System info:
MS Win 98 SE
4.10.2222.A

PC:
GenuineIntel
x86 Family Model 8 Stepping 6
511.0 mb ram

Software:
ZoneAlarm (I turned it off)


I really hope you can help me out with this port theft,

Thanks in advance !

HiVe
ultrahive is offline