
Signature
Tim Slattery
MS MVP(Shell/User)
Slattery_T@bls.gov
http://members.cox.net/slatteryt
> fr...@theshire.net wrote:
> > the ftp command line is:
[quoted text clipped - 5 lines]
> nothing about it. According to
> http://www.iss.net/security_center/advice/Services/FTP/PASV/default.htm
Thanks for the confirmation. I appreciate this pointer.
I had tried "quote pasv" previously, and a network trace showed that
it does send PASV, and the ftp server does respond with "entering
passive mode".
But subsequent transmissions from the ftp client were not right, and
the FTP dir, get or put command timed out.
frodo@theshire.net - 24 Oct 2008 20:44 GMT
> > fr...@theshire.net wrote:
> > > the ftp command line is:
[quoted text clipped - 5 lines]
> > nothing about it. According to
> > http://www.iss.net/security_center/advice/Services/FTP/PASV/default.htm
> Thanks for the confirmation. I appreciate this pointer.
> I had tried "quote pasv" previously, and a network trace showed that
> it does send PASV, and the ftp server does respond with "entering
> passive mode".
> But subsequent transmissions from the ftp client were not right, and
> the FTP dir, get or put command timed out.
Well, I did some investigating and here's what I found. My ftp script has
had the "quote pasv" command line in it for years. I use it every day to
sync w/ a unix box, and it works fine. As I recall I _HAD_ to add that
line to get it to work, because of a firewall at my end (ZA). Back then
(years ago) I connected via a dial-up modem.
For grins I just took the pasv line out of the script, and everything
still works just fine; I still have ZA running too, but now I go thru my
LAN port to a FIOS router; I imagine the (modern) router's NAT function is
handling the Active Mode connection properly.
reference: http://www.slacksite.com/other/ftp.html
But, bottom line, with or without it my ftp sessions work just fine. I am
using the (primitive) MS-provided win-xp ftp client. There are many
(better) ftp clients out there, perhaps you should try another. Or
perhaps your router needs a setting tweak.
Sorry I couldn't be more help.
Tim Slattery - 24 Oct 2008 21:04 GMT
>I had tried "quote pasv" previously, and a network trace showed that
>it does send PASV, and the ftp server does respond with "entering
>passive mode".
>But subsequent transmissions from the ftp client were not right, and
>the FTP dir, get or put command timed out.
Sounds right to me. The server is in passive mode, so it's sent the
client a port number to connect to, and is waiting for the client to
connect. The client is in active mode, so it's waiting for the server
to connect to it. And everybody waits forever.

Signature
Tim Slattery
MS MVP(Shell/User)
Slattery_T@bls.gov
http://members.cox.net/slatteryt
Stu1000 - 05 Oct 2010 10:55 GMT
>>I had tried "quote pasv" previously, and a network trace showed that
>>it does send PASV, and the ftp server does respond with "entering
[quoted text clipped - 7 lines]
>connect. The client is in active mode, so it's waiting for the server
>to connect to it. And everybody waits forever.
You could try using the passive ftp version of FTP.exe from
http://www.passive-ftp.com
cheers
Stu