Linode Forum
https://forum.linode.com/

FTPS: Directory Listing Denied
https://forum.linode.com/viewtopic.php?f=19&t=2914
Page 1 of 1

Author:  dgraham [ Mon Nov 05, 2007 11:19 am ]
Post subject:  FTPS: Directory Listing Denied

Hi,

I recently just started setting up my server. I installed Ubuntu 6, iptables and proftpd following this tutorial: http://ubuntuforums.org/showthread.php?t=79588

I followed the instructions for setting up ftps as described in that link, but unfortunately, I cannot seem to use ftps. When I try to connect, it logs me in fine, but denies me a directory listing. Using regular unencrypted ftp works perfectly, however.

Does anyone maybe have any thoughts?

Thanks a lot,

-Dougal

Author:  pclissold [ Mon Nov 05, 2007 12:58 pm ]
Post subject: 

Possibly a firewall problem?

FTPS and firewalls do not play nicely. The control connection happens on a well-known port, so you can log in OK. The data connection is a problem for FTP-aware firewalls. In a regular FTP session, the firewall can inspect the FTP server's responses on the control connection to a client's PASV or PORT command, and thus know which on which ports/addresses the data connection will be established. In an FTPS session, the control connection messages are encrypted, so the FTP-aware firewall cannot peek. Hence, it cannot know which on which ports the data connection will be established.

If this is the case for you, the firewall needs to be configured to allow a range of ports which are then set in proftpd using the PassivePorts directive.

Author:  dgraham [ Mon Nov 05, 2007 2:03 pm ]
Post subject: 

Awesome, thanks a lot! I opened those ports for and set the passive ports and it works like a charm, thanks a lot.

-Dougal

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/