FTP partially does not work

[xomacx (Alexander Albert)]

Hello Peter,

thank you very much for a super fast answer!

@pmueller

This is strange to see. I would have expected FTP to either work always, or never, especially when talking to the same FTP server.

I would have expected that too, but that was not the case…

@pmueller

What do you mean exactly by “doesn’t work”? Do you observe any error messages? What’s in IPFire’s firewall logs at or around the time you try to establish the FTP connection?

I received the message “Authentication failed”.
Where exactly do I need to look in the logs?

@pmueller

I do not know any specifications of Strato’s FTP service. Are they doing passive FTP for some users (see also this thread )? Do they offer FTP encrypted in transit?

I’m a whole step further: I made another phone call to Strato. The main user also has SSH access. Therefore it is possible to use sftp for this user. Then port 22 is sufficient.

All other users use ftp. There you need then port 21 to initiate the connection. Because of the passive ftp the server will send a list of ports on which the communication should take place. In my case these were 6 ports, but not as I would expect in the range 50.000+ but all 6 ports were requested in the range below 1024.

I will do a devil and open these ports for all.

What other option do I have? What is the best way to configure it in the firewall rule?

Thanks, and best regards,
AL