Unable to connect to FTP - Connection timeout after MLSD

Question

So here is my problem, I'm absolutely unable to connect to a FTP server, in circumstances I've never seen before. Here is the situation :

I get a "Connection timed out" just after the MLSD command.
I usually use Filezilla, under Ubuntu, but to make sure the problem isn't related to this particular client I tried a few others : gftp on ubuntu and winscp and freeftp on windows 7. All the same result.
Also made sure to try with Active or Passive modes. Same result.
At this point I would be inclined to think there is something wrong with my current network (furthermore, according to a coworker the FTP server is OK). But I did check with http://ftptest.net/ and I am able to get the directory listing (which I'm not able to through a FTP client).

So in the end the last thing I didn't tried is to go on another network, solution which seems would work, but wouldn't be very practical in the long run. And thus I guess there's something wrong with my router... but what could it possibly be?

Note : I did try to register and post this question on filezilla's board first... but I can't create an account with a gmail nor hotmail account. WTF?

For information, we also had the MLSD command problem, but this was not a firewall issue, but too many files in the directory (more than 40 000). — Marc MAURICE, Apr 22 '13 at 15:29
I had this problem too. Strangely, the issue resolved after I added the server configuration to the Site Manager and set UNIX as server type. — Emiswelt, May 30 '14 at 03:34
In FileZilla version 3.21, I needed to switch "Only use plain FTP (insecure)" in the connection settings to make it work. I will play with settings on the server now to make it not so "insecure". — Miro J., Sep 02 '16 at 22:11

score 7 · Answer 1 · answered Jun 02 '11 at 17:57

7

According to the FileZilla admins, your router is probably the issue (even though you probably can't do anything about it), and they're not going to fix it to fall back to LIST if MLSD times out. See: http://forum.filezilla-project.org/viewtopic.php?f=2&t=11405&start=15

Solution: Try Core FTP or similar. It's unlikely you'll be able to convince the stubborn FileZilla folks to add a (stupidly simple) workaround option- "fall back to LIST if MLSD times out".

Or, since it's open source, see if you or someone else can make the change and compile it yourself. I imagine if you try to submit the change to be added to the official build, they'll reject it, but perhaps we could be pleasantly surprised.

answered Jun 02 '11 at 17:57

nstenz

173
1
5

1

Good to know! Gnome Commander connected just fine. – styu Aug 14 '14 at 14:11
1

Wow, what a professional and helpful response in that FileZilla forum: "Stop using your stupid firewall then, it's not part of the FTP protocol." – basic6 Apr 18 '15 at 14:06
+1 for the polite critiquing tone! – Miro J. Sep 02 '16 at 21:35

score 6 · Answer 2 · edited Nov 22 '16 at 14:28

6

After a long search, the solution was simple:

Go to Site Management, choose the site with the problem. Choose tab Transfer Settings and select Active instead of Default.

edited Nov 22 '16 at 14:28

Tenaciousd93

101
3

answered Mar 28 '13 at 08:55

jan

61
1
1

This is sort of just moving the problem along though isn't it? The server firewall isn't configured to use passive mode properly, so you're asking it to use active mode and hoping that the client firewall doesn't intercept it. You'd be better off fixing the servers firewall so that properly secured clients (behind a firewall) can access it. – Ari Cooper-Davis Aug 08 '20 at 12:20

score 2 · Answer 3 · answered Apr 02 '15 at 02:03

2

I found the problem in Encryption when I changed it to "Only use plain FTP (insecure)" then its working perfectly!

FileZilla is very familiar to me and I need to fight for bugs every update of it.

answered Apr 02 '15 at 02:03

Abbas

137
3

Afaik this question wasn't ftp client specific and wasn't windows-specific. – peterh Apr 02 '15 at 03:02
1

Considering disabling TLS is a bad advice. Of course that solves the issue which is caused by TLS use, but this run an insecure connection... – Yvan Jun 23 '16 at 08:23

score 1 · Answer 4 · answered Jan 21 '11 at 01:51

I fixed the problem by using a ssh tunnel through one of my personal server. I am absolutely stumped as to why this would work. I'm currently in Japan, and my server in Canada, so perhaps there is an issue with IPv6 address (even though the server says it shouldn't)...?

score 1 · Answer 5 · answered Aug 09 '11 at 16:33

Just want to let people know how I got this working.

With the MLSD timeout the problem can also be in the router.

I got a new Asus router and I forwarded the ports for passive mode wrong. I have a qnap NAS and I connect on port 21 on ftp and port xxxxx:xxxxx in passive mode. In my asus router I set the port forward (virtual server) correctly now and it works again. My FTP is forwarded correctly on port 21 to my NAS IP, just standart stuff. The problem was the passive ports my NAS wanted to use also.

I did this in my port forward section (Virtual Server is it called in ASUS routers):

Service name: Whateveryoulike

Port Range: The passive ports your device will use (standart 55536:56559 for Qnap)

Local IP: The local IP of the device (something like 192.168.0.xxx)

Local Port: LEAVE THIS BLANK

Protocol: Both

Add

Apply

BOOM! We got uplink.

The problem could be something else, but this fixed my timeout and now it all works.

score 0 · Answer 6 · answered May 13 '20 at 00:21

0

Was easily fixed by entering on Filezila

Edit--->Settings--->Passive mode settings

Change to "Follow the Following IP: Enter your external static IP

answered May 13 '20 at 00:21

Gal Zazon

1

score 0 · Answer 7 · answered Apr 30 '15 at 13:28

If you are connecting to a unix server, and it is running iptables (firewall), then check your iptables config, in /etc/sysconfig/iptable-config, for this line:

IPTABLES_MODULES=""

if it is blank, edit it as follows:

IPTABLES_MODULES="ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ftp"

and reload or restart iptables: service iptables reload (or restart). Now try connecting (with passive mode), and it should work without a problem.

This fixed our problem, in the office, in desktops with Windows 7/8.1, behind a NAT, and connecting with WinSCP 5.5.3 to a production server running CentOS 6.6 x86_64, Plesk 12 and ProFTPd.

You should not need to make any crazy setting in your ftp client.

Cheers, Michael.

PS: You will need SSH access for this, and root permissions.

score 0 · Answer 8 · edited Sep 29 '17 at 10:49

Like others, i've wasted a lot of time with this issue.

I have now fixed the problem.

I used FireFTP (a free Firefox add-on) and it worked seamlessly, first time.

One thing i noticed was that FireFTP defaulted to Port 21.

On the other hand, FileZilla did not allow the Port box to be filled in (it would default back to blank). Perhaps that was part of the problem.

I tried all the things mentioned previously (change to Active, allow Filezilla past the Firewall, etc) and none worked for me (I have Windows 10).

score -1 · Answer 9 · edited Mar 21 '18 at 10:39

-1

I had the same issue, trying to connect via Quick connect on port 2222. Then I used Site Manager with the settings below and no more error:

port 2222
protocol SFTP
Logon type Normal
user and pass

Then, connecting via the site manager went through immediately.

edited Mar 21 '18 at 10:39

Andrew Schulman

8,811
21
32
47

answered Mar 21 '18 at 09:56

Daniel

1

score -3 · Answer 10 · answered Nov 18 '15 at 05:57

It's preaty simple!

You must add a firewall exeption for Fillzilla (or any client you use).

(If it doesn't work, it may be something about the firewall or port forward of your router.)

PS: Changing the mode of your connection to active can be a trick, but it's not the "best practice solution". ;-)

Unable to connect to FTP - Connection timeout after MLSD

10 Answers10