Server sent passive reply with unroutable address. Using server address instead.

Discussion in 'General' started by adamjedgar, Sep 9, 2017.

  1. adamjedgar

    adamjedgar Member

    I am able to get a directory listing, however...

    How can i resolve the following? (i suspect its because my hosts file is not correct?)

    Connection established, waiting for welcome message...
    Status: Initializing TLS...
    Status: Verifying certificate...
    Status: TLS connection established.
    Status: Logged in
    Status: Retrieving directory listing...
    Status: Server sent passive reply with unroutable address. Using server address instead.
    Status: Directory listing of "/" successful

    ----------------------------------------------------------

    Also, a second question,
    if i try to use notepad++ to ftp into server i get the following
    220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
    220-You are user number 3 of 50 allowed.
    220-Local time is now 00:17. Server port: 21.
    220-This is a private system - No anonymous login
    220-IPv6 connections are also welcome on this server.
    220 You will be disconnected after 15 minutes of inactivity.
    -> USER goanna-adminadam
    331 User goanna-adminadam OK. Password required
    -> PASS *HIDDEN*
    530 Login authentication failed
    Unable to connect
     
    Last edited: Sep 9, 2017
  2. Create a file /etc/pure-ftpd/conf/ForcePassiveIP where you will need to enter your external IP. Then restart pure-ftpd
     
    adamjedgar likes this.
  3. adamjedgar

    adamjedgar Member

    Is this the ip address for the ispconfig server, or my client machine trying to access it?

    Just an update, i have managed to glean a little more information out of filezilla that may be of help in pointing me in the right direction for solving this...in looking at the "response" shown below, does this mean that my problem is i need to port forward 10,0,0,15,29 (the internal ip adress of my desktop pc) to my home internet service static ip address?
    Also, i am assuming that last number (29) is the port being used on my local machine?

    if the answer is yes, i have a technicolor tg587n v3 internet modem...what should i do to achieve that? (ie how do i do it and what ports am i assigning?)

    see below...
    Host <site domain name.com.au>
    Protocol: FTP
    Encryption: Use explicit FTP over TLS is available
    Transfer mode: Default
    Login type: Normal

    Status: Resolving address of <mydomain>.com.au
    Status: Connecting to <ispconfig-site-ipaddress>:21...
    Status: Connection established, waiting for welcome message...
    Status: Initializing TLS...
    Status: Verifying certificate...
    Status: TLS connection established.
    Status: Logged in
    Status: Retrieving directory listing...
    Status: Server sent passive reply with unroutable address. Passive mode failed.
    Command: PORT 10,0,0,15,222,29
    Response: 500 I won't open a connection to 10.0.0.15 (only to <my home static ip address>)
    Error: Failed to retrieve directory listing
    Status: Connection closed by server

    EDIT
    i have done the following.
    1. on my desktop pc (set the dns to my inerternet service provider primary and secondary dns servers for my home internet external static ip address)
    2. in windows, i have changed my ethernet adapter properties to an internal static ip address instead of dhcp (address is same as it was ie 10.0.0.15 just not dhcp anymore)
    3. gone into my modem settings and port forwarded tcp:10.0.0.15:29 with the name "filezilla passv" (so i know what its for)

    Is this correct?
    Should i assign a larger range of ports?

    Update...actually i think this doesnt work...in any case, for passv mode i think its my web server i need to configure?
     
    Last edited: Sep 12, 2017
  4. adamjedgar

    adamjedgar Member

    woohoo...problem solved.
    The solution was a couple of things...

    First
    ForcePassiveIp
    create a new file in /etc/pure-ftpd/conf/ForcePassiveIP
    add your ispconfig webserver external ip address to it as stated above by 24x7 (thanks man that was the key)

    Second
    PassivePortRange
    create a second file in /etc/pure-ftpd/conf/PassivePortRange
    add port range "40110-40210" as outlined in Tills tutorial here

    Problem solved...filezilla now logs in using
    Protocol: ftp
    encryption: require explicit FTP over TLS
    Transfer mode: Passive (PASV)

    Now for the hard part...will adobe muse work???

    WWWWWWOOOOOOOHHHHHHHHHHHHHHHHHOOOOOOOOOOOOOOOOOO! IT Works with Muse! FTP explicit over TLS with PASV is on deck! Huge HUGE WIN! :):D:p:oops:
     
    Last edited: Sep 12, 2017
  5. Glad you sort it out. Sorry was away so didn't see your posts. In configuration files you always put server IP and passive port range is needed for communicate both command and data channels.
     
    adamjedgar likes this.

Share This Page