FTP exports, driving me nuts

[hbomb]

Help. We just made a server change for our league. I tested this solution prior to rolling it out, but the transition hasn't been clean for all of our GM's. I have 7 GM's so far, that are having no problem with the league file, and three that are (having problems) exporting.

All have the right league file, and I've also sent them new settings folders. The FTP settings are Passive, Secure TSL.

Have tried the following
- asking them to expicitly select "passive" in the online league settings
- asking them to try Active, Secure TSL
- disabling firewalls - one even disconnected his router
- banging my head against the wall. didn't help, head is now sore.


Here's the error logs from User 1
FTP_CLIENT object created
FTP_CLIENT callback rate set to 300 ms
Set connect-, read- and idle-timeout to 30000 ms
Set connect-, read- and idle-timeout to 30000 ms
FTP_CLIENT:pen - host set to ftp.recruithard.org
FTP_CLIENT:pen - user set to fcb_lgexports@recruithard.org
FTP_CLIENT:pen - password set
FTP_CLIENT:pen - port set to 21
set to passive mode
Activate TLS 1.0 encrypted channel (Secure FTP)Successfully opened connection to host ftp.recruithard.org
Error: ChilkatLog:

ClearControlChannel:

DllDate: Feb 17 2010

cccStatusCode: 500

response: 500 Unknown command

Failed.
put - file size is 98669 byte
Successfully started sending file team_35.ootp
ChilkatLog:

AsyncPutFile:

DllDate: Feb 17 2010

Username: bzabel

Component: Visual C++ 9.0

localFileSize: 98669

restartNext: 0

ModeZ: 0

BinaryMode: 1

Sent PROT P command.

ProtPResponse: 200 Data protection level set to "private"

PbszProt: Elapsed time: 157 millisec

Passive transfer mode

EPSV_reply: 229 EXTENDED PASSIVE MODE OK (|||31765|)

hostAddr: 69.39.232.66

DataConnect:

hostname: 69.39.232.66

port: 31765

ConnectTimeoutMs: 30000

timeout waiting for connect to complete;

IP_Address:

ipAddr: 0x0

Hostname: 69.39.232.66

SocketHandle: 0x680

sockError: 10022

Connect function failed

SetupPassiveDataSocket: Elapsed time: 30187 millisec

Failed to setup passive data socket for PutFile


Closed connection
Closed connection
FTP_CLIENT object destroyed

From User 2
FTP_CLIENT object created
FTP_CLIENT callback rate set to 300 ms
Set connect-, read- and idle-timeout to 30000 ms
Set connect-, read- and idle-timeout to 30000 ms
FTP_CLIENT:pen - host set to ftp.recruithard.org
FTP_CLIENT:pen - user set to fcb_lgexports@recruithard.org
FTP_CLIENT:pen - password set
FTP_CLIENT:pen - port set to 21
set to passive mode
Activate TLS 1.0 encrypted channel (Secure FTP)Error: ChilkatLog:

ClearControlChannel:

DllDate: Feb 17 2010

SocketError: Error 2749

Check to make sure the connection is not blocked by a firewall or anti-virus port filtering.

Error sending on socket

send_size: 5

Failed.
Closed connection
FTP_CLIENT object destroyed

From User 3
Connecting to host ftp.recruithard.org:21
= 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
= 220-You are user number 1 of 200 allowed.
= 220-Local time is now 07:23. Server port: 21.
= 220-This is a private system - No anonymous login
= 220-IPv6 connections are also welcome on this server.
= 220 You will be disconnected after 15 minutes of inactivity.
> USER fcb_lgexports@recruithard.org

= 421 Sorry, cleartext sessions are not accepted on this server.
Please reconnect using SSL/TLS security mechanisms.
Error: No password request received
Connection closed

Any ideas?

[Alan T]

Ok, the first user looks like there is a connectivity issue for them. I have seen something similar in the real world before (not in OOTP), and I wonder if he is behind some form of firewall or proxy server that does not understand or support ESPV. Long story short, ESPV is new and some firewall infrastructure does not support or expect it, thus needing the older PASV manner of setting up Passive data transports. I would need more information about what type of firewall (software and hardware) that they use as well as any ftp proxy server that they may be going through. That info can be PM'd to me if that is better for you.

The second user It looks like it is saying it set up a passive connection but then the error message it gives back indicates it wasn't. Perhaps something is not working correctly here. Can you tell me what OS that user 2 is? In fact if I can have that info for user 1 as well, that would be helpful.

For user 3, it simply looks like he isn't using TLS and instead is just using standard unencrypted FTP.

[hbomb]

Originally Posted by Alan T

Ok, the first user looks like there is a connectivity issue for them. I have seen something similar in the real world before (not in OOTP), and I wonder if he is behind some form of firewall or proxy server that does not understand or support ESPV. Long story short, ESPV is new and some firewall infrastructure does not support or expect it, thus needing the older PASV manner of setting up Passive data transports. I would need more information about what type of firewall (software and hardware) that they use as well as any ftp proxy server that they may be going through. That info can be PM'd to me if that is better for you.

The second user It looks like it is saying it set up a passive connection but then the error message it gives back indicates it wasn't. Perhaps something is not working correctly here. Can you tell me what OS that user 2 is? In fact if I can have that info for user 1 as well, that would be helpful.

For user 3, it simply looks like he isn't using TLS and instead is just using standard unencrypted FTP.

Edited
User 2 is on Windows - is there a specific resolution for this you have in mind? he's even tried disabling his router. He's testing the FTEPS settings via Filezilla, to confirm if it's a client issue vs. a firewall/network issue

User 1 is likely on Windows, I'll cc: you on an email
User 3 is on Mac. But since he has the new server address, it's unlikely he's using unencrypted FTP as a result of a commish/user setting (all recruithard.org settings are FTPES); last week, the league was operating off a different server/domain with cleartext FTP.

Thanks Alan.

[hyde4us11]

Alan the first user is me. I can connect to FOOL-X fine which in a sense takes the firewall out of play doesn't it?


EDIT: I believe I am user 2. Harold can confirm which user I am for sure.

[hbomb]

Ok, I'm changing servers. Might be good for OOTP to keep this as a case study for FTPES use. Not sure if anyone if using this successfully.

The problems were too divergent for me to stick to resolving it.