vsftp on Azure VM - filezilla reports private ip sent by server in passive mode The Next CEO of Stack OverflowPassive mode for FileZilla FTP isn't workingAmazon Ec2: Issue with Setting up FTP ServerWindows Server 2003 Blocking Outgoing FTP Passive ModeWhy does Filezilla try to switch to passive mode on ports that are outside the range of my FTP server?Setting up VSFTPD on AWS EC2 InstanceHow to configure vsftpd to work with passive modeConnections Number of VSFTP in Passive ModeServer sent passive reply with unroutable address when connecting to FTP site with FileZillaServer sent passive reply with unroutable address. Using server address instead IIS 8.5FileZilla Server 425 Can't open data connection for transfer of “/”

What steps are necessary to read a Modern SSD in Medieval Europe?

RigExpert AA-35 - Interpreting The Information

Would a grinding machine be a simple and workable propulsion system for an interplanetary spacecraft?

Why do remote US companies require working in the US?

Domestic-to-international connection at Orlando (MCO)

Does increasing your ability score affect your main stat?

Grabbing quick drinks

What connection does MS Office have to Netscape Navigator?

What did we know about the Kessel run before the prequels?

The exact meaning of 'Mom made me a sandwich'

How many extra stops do monopods offer for tele photographs?

Can MTA send mail via a relay without being told so?

Would a completely good Muggle be able to use a wand?

Flying from Cape Town to England and return to another province

Why did CATV standarize in 75 ohms and everyone else in 50?

Easy to read palindrome checker

Why isn't the Mueller report being released completely and unredacted?

A small doubt about the dominated convergence theorem

"misplaced omit" error when >centering columns

Why is quantifier elimination desirable for a given theory?

0 rank tensor vs 1D vector

Won the lottery - how do I keep the money?

Why does standard notation not preserve intervals (visually)

Writing differences on a blackboard



vsftp on Azure VM - filezilla reports private ip sent by server in passive mode



The Next CEO of Stack OverflowPassive mode for FileZilla FTP isn't workingAmazon Ec2: Issue with Setting up FTP ServerWindows Server 2003 Blocking Outgoing FTP Passive ModeWhy does Filezilla try to switch to passive mode on ports that are outside the range of my FTP server?Setting up VSFTPD on AWS EC2 InstanceHow to configure vsftpd to work with passive modeConnections Number of VSFTP in Passive ModeServer sent passive reply with unroutable address when connecting to FTP site with FileZillaServer sent passive reply with unroutable address. Using server address instead IIS 8.5FileZilla Server 425 Can't open data connection for transfer of “/”










1















I'm setting up a secure FTP server on an Ubuntu 16.04 machine on Azure. It's FTP over TLS, with anonymous access disabled.



Trying to use the server using Filezilla works fine - authentication, transfer, directory listing - everything... except I get the following warning from Filezilla:




Server sent passive reply with unroutable address. Using server
address instead.




Sure, that makes sense - the VM has a private IP address, and in passive mode, it sends that private IP address to the client. The solution - add the following to vsftp.conf (this is an example, not the actual configuration):



pasv_enable=YES
port_enable=YES
#The VM allows connections to ports 12345 & 12346 - remember, this is an example
pasv_min_port=12345
pasv_max_port=12346
#The VM's domain name
pasv_address=myftpservervm.cloudapp.net
#Make vsftp resolve myftpservervm.cloudapp.net and send that IP address to clients
pasv_addr_resolve=YES


Then I restart vsftp, and... nothing happens. I still get these:




Server sent passive reply with unroutable address. Using server
address instead.




I even tried setting pasv_address to the exact (external) IP address of the server (with and without pasv_addr_resolve=YES) and the result is the same.



Am I missing something?



I'm using vsftpd 3.0.3 (from the Ubuntu repo) with Filezilla 3.24.0 on Ubuntu 16.04 x64



Edit:



Apparently vsftp sends an IP address of 0.0.0.0 when entering passive mode. This issue seems relevant.










share|improve this question




























    1















    I'm setting up a secure FTP server on an Ubuntu 16.04 machine on Azure. It's FTP over TLS, with anonymous access disabled.



    Trying to use the server using Filezilla works fine - authentication, transfer, directory listing - everything... except I get the following warning from Filezilla:




    Server sent passive reply with unroutable address. Using server
    address instead.




    Sure, that makes sense - the VM has a private IP address, and in passive mode, it sends that private IP address to the client. The solution - add the following to vsftp.conf (this is an example, not the actual configuration):



    pasv_enable=YES
    port_enable=YES
    #The VM allows connections to ports 12345 & 12346 - remember, this is an example
    pasv_min_port=12345
    pasv_max_port=12346
    #The VM's domain name
    pasv_address=myftpservervm.cloudapp.net
    #Make vsftp resolve myftpservervm.cloudapp.net and send that IP address to clients
    pasv_addr_resolve=YES


    Then I restart vsftp, and... nothing happens. I still get these:




    Server sent passive reply with unroutable address. Using server
    address instead.




    I even tried setting pasv_address to the exact (external) IP address of the server (with and without pasv_addr_resolve=YES) and the result is the same.



    Am I missing something?



    I'm using vsftpd 3.0.3 (from the Ubuntu repo) with Filezilla 3.24.0 on Ubuntu 16.04 x64



    Edit:



    Apparently vsftp sends an IP address of 0.0.0.0 when entering passive mode. This issue seems relevant.










    share|improve this question


























      1












      1








      1








      I'm setting up a secure FTP server on an Ubuntu 16.04 machine on Azure. It's FTP over TLS, with anonymous access disabled.



      Trying to use the server using Filezilla works fine - authentication, transfer, directory listing - everything... except I get the following warning from Filezilla:




      Server sent passive reply with unroutable address. Using server
      address instead.




      Sure, that makes sense - the VM has a private IP address, and in passive mode, it sends that private IP address to the client. The solution - add the following to vsftp.conf (this is an example, not the actual configuration):



      pasv_enable=YES
      port_enable=YES
      #The VM allows connections to ports 12345 & 12346 - remember, this is an example
      pasv_min_port=12345
      pasv_max_port=12346
      #The VM's domain name
      pasv_address=myftpservervm.cloudapp.net
      #Make vsftp resolve myftpservervm.cloudapp.net and send that IP address to clients
      pasv_addr_resolve=YES


      Then I restart vsftp, and... nothing happens. I still get these:




      Server sent passive reply with unroutable address. Using server
      address instead.




      I even tried setting pasv_address to the exact (external) IP address of the server (with and without pasv_addr_resolve=YES) and the result is the same.



      Am I missing something?



      I'm using vsftpd 3.0.3 (from the Ubuntu repo) with Filezilla 3.24.0 on Ubuntu 16.04 x64



      Edit:



      Apparently vsftp sends an IP address of 0.0.0.0 when entering passive mode. This issue seems relevant.










      share|improve this question
















      I'm setting up a secure FTP server on an Ubuntu 16.04 machine on Azure. It's FTP over TLS, with anonymous access disabled.



      Trying to use the server using Filezilla works fine - authentication, transfer, directory listing - everything... except I get the following warning from Filezilla:




      Server sent passive reply with unroutable address. Using server
      address instead.




      Sure, that makes sense - the VM has a private IP address, and in passive mode, it sends that private IP address to the client. The solution - add the following to vsftp.conf (this is an example, not the actual configuration):



      pasv_enable=YES
      port_enable=YES
      #The VM allows connections to ports 12345 & 12346 - remember, this is an example
      pasv_min_port=12345
      pasv_max_port=12346
      #The VM's domain name
      pasv_address=myftpservervm.cloudapp.net
      #Make vsftp resolve myftpservervm.cloudapp.net and send that IP address to clients
      pasv_addr_resolve=YES


      Then I restart vsftp, and... nothing happens. I still get these:




      Server sent passive reply with unroutable address. Using server
      address instead.




      I even tried setting pasv_address to the exact (external) IP address of the server (with and without pasv_addr_resolve=YES) and the result is the same.



      Am I missing something?



      I'm using vsftpd 3.0.3 (from the Ubuntu repo) with Filezilla 3.24.0 on Ubuntu 16.04 x64



      Edit:



      Apparently vsftp sends an IP address of 0.0.0.0 when entering passive mode. This issue seems relevant.







      ubuntu ftp azure vsftpd






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Feb 6 '17 at 16:16







      MaltAlex

















      asked Feb 6 '17 at 14:27









      MaltAlexMaltAlex

      1187




      1187




















          2 Answers
          2






          active

          oldest

          votes


















          2














          I test in my lab, at first I met the same problem as you. I checked as the following steps:



          1.netstat -ant I get the following result



          tcp6 0 0 172.17.1.4:21 167.220.255.56:10979 TIME_WAIT 


          Based on my experience, ftp should be listening on tcp not tcp6 on Azure VM



          2.I try to change the configuration file /etc/vsftpd.conf.



          listen=yes
          listen_ipv6=no


          Then I restart ftp service and check by using netstat -ant



          tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 


          1. Test by using Filezilla.

          enter image description here



          Notes: You should open ports 20,21,12345-12346 on Azure NSG(Inbound rule)






          share|improve this answer
































            1














            You need just a minor modification. Edit /etc/vsftpd.conf or whatever the config file might be, and do this change:



            pasv_address=public_ip_of_aws_instance_not_hostname_or_private_ip


            Save the file, restart the vsftpd service and check again!



            Be sure that hose passive ports are in the tcp allow list in your Security Groups (you can configure those from your AWS EC2 Dashboard).






            share|improve this answer

























            • That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

              – MaltAlex
              Feb 6 '17 at 15:40











            Your Answer








            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "2"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f830866%2fvsftp-on-azure-vm-filezilla-reports-private-ip-sent-by-server-in-passive-mode%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            2 Answers
            2






            active

            oldest

            votes








            2 Answers
            2






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            2














            I test in my lab, at first I met the same problem as you. I checked as the following steps:



            1.netstat -ant I get the following result



            tcp6 0 0 172.17.1.4:21 167.220.255.56:10979 TIME_WAIT 


            Based on my experience, ftp should be listening on tcp not tcp6 on Azure VM



            2.I try to change the configuration file /etc/vsftpd.conf.



            listen=yes
            listen_ipv6=no


            Then I restart ftp service and check by using netstat -ant



            tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 


            1. Test by using Filezilla.

            enter image description here



            Notes: You should open ports 20,21,12345-12346 on Azure NSG(Inbound rule)






            share|improve this answer





























              2














              I test in my lab, at first I met the same problem as you. I checked as the following steps:



              1.netstat -ant I get the following result



              tcp6 0 0 172.17.1.4:21 167.220.255.56:10979 TIME_WAIT 


              Based on my experience, ftp should be listening on tcp not tcp6 on Azure VM



              2.I try to change the configuration file /etc/vsftpd.conf.



              listen=yes
              listen_ipv6=no


              Then I restart ftp service and check by using netstat -ant



              tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 


              1. Test by using Filezilla.

              enter image description here



              Notes: You should open ports 20,21,12345-12346 on Azure NSG(Inbound rule)






              share|improve this answer



























                2












                2








                2







                I test in my lab, at first I met the same problem as you. I checked as the following steps:



                1.netstat -ant I get the following result



                tcp6 0 0 172.17.1.4:21 167.220.255.56:10979 TIME_WAIT 


                Based on my experience, ftp should be listening on tcp not tcp6 on Azure VM



                2.I try to change the configuration file /etc/vsftpd.conf.



                listen=yes
                listen_ipv6=no


                Then I restart ftp service and check by using netstat -ant



                tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 


                1. Test by using Filezilla.

                enter image description here



                Notes: You should open ports 20,21,12345-12346 on Azure NSG(Inbound rule)






                share|improve this answer















                I test in my lab, at first I met the same problem as you. I checked as the following steps:



                1.netstat -ant I get the following result



                tcp6 0 0 172.17.1.4:21 167.220.255.56:10979 TIME_WAIT 


                Based on my experience, ftp should be listening on tcp not tcp6 on Azure VM



                2.I try to change the configuration file /etc/vsftpd.conf.



                listen=yes
                listen_ipv6=no


                Then I restart ftp service and check by using netstat -ant



                tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 


                1. Test by using Filezilla.

                enter image description here



                Notes: You should open ports 20,21,12345-12346 on Azure NSG(Inbound rule)







                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited Feb 7 '17 at 6:23

























                answered Feb 7 '17 at 3:11









                Shui shengbaoShui shengbao

                3,0671518




                3,0671518























                    1














                    You need just a minor modification. Edit /etc/vsftpd.conf or whatever the config file might be, and do this change:



                    pasv_address=public_ip_of_aws_instance_not_hostname_or_private_ip


                    Save the file, restart the vsftpd service and check again!



                    Be sure that hose passive ports are in the tcp allow list in your Security Groups (you can configure those from your AWS EC2 Dashboard).






                    share|improve this answer

























                    • That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                      – MaltAlex
                      Feb 6 '17 at 15:40















                    1














                    You need just a minor modification. Edit /etc/vsftpd.conf or whatever the config file might be, and do this change:



                    pasv_address=public_ip_of_aws_instance_not_hostname_or_private_ip


                    Save the file, restart the vsftpd service and check again!



                    Be sure that hose passive ports are in the tcp allow list in your Security Groups (you can configure those from your AWS EC2 Dashboard).






                    share|improve this answer

























                    • That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                      – MaltAlex
                      Feb 6 '17 at 15:40













                    1












                    1








                    1







                    You need just a minor modification. Edit /etc/vsftpd.conf or whatever the config file might be, and do this change:



                    pasv_address=public_ip_of_aws_instance_not_hostname_or_private_ip


                    Save the file, restart the vsftpd service and check again!



                    Be sure that hose passive ports are in the tcp allow list in your Security Groups (you can configure those from your AWS EC2 Dashboard).






                    share|improve this answer















                    You need just a minor modification. Edit /etc/vsftpd.conf or whatever the config file might be, and do this change:



                    pasv_address=public_ip_of_aws_instance_not_hostname_or_private_ip


                    Save the file, restart the vsftpd service and check again!



                    Be sure that hose passive ports are in the tcp allow list in your Security Groups (you can configure those from your AWS EC2 Dashboard).







                    share|improve this answer














                    share|improve this answer



                    share|improve this answer








                    edited yesterday









                    Changming Sun

                    1034




                    1034










                    answered Feb 6 '17 at 15:25









                    Bogdan StoicaBogdan Stoica

                    1795




                    1795












                    • That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                      – MaltAlex
                      Feb 6 '17 at 15:40

















                    • That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                      – MaltAlex
                      Feb 6 '17 at 15:40
















                    That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                    – MaltAlex
                    Feb 6 '17 at 15:40





                    That's exactly what I did. I tried both the external IP, and the domain name (with pasv_addr_resolve=YES). It produced the same result.

                    – MaltAlex
                    Feb 6 '17 at 15:40

















                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Server Fault!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f830866%2fvsftp-on-azure-vm-filezilla-reports-private-ip-sent-by-server-in-passive-mode%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

                    Vilaño, A Laracha Índice Patrimonio | Lugares e parroquias | Véxase tamén | Menú de navegación43°14′52″N 8°36′03″O / 43.24775, -8.60070

                    Cegueira Índice Epidemioloxía | Deficiencia visual | Tipos de cegueira | Principais causas de cegueira | Tratamento | Técnicas de adaptación e axudas | Vida dos cegos | Primeiros auxilios | Crenzas respecto das persoas cegas | Crenzas das persoas cegas | O neno deficiente visual | Aspectos psicolóxicos da cegueira | Notas | Véxase tamén | Menú de navegación54.054.154.436928256blindnessDicionario da Real Academia GalegaPortal das Palabras"International Standards: Visual Standards — Aspects and Ranges of Vision Loss with Emphasis on Population Surveys.""Visual impairment and blindness""Presentan un plan para previr a cegueira"o orixinalACCDV Associació Catalana de Cecs i Disminuïts Visuals - PMFTrachoma"Effect of gene therapy on visual function in Leber's congenital amaurosis"1844137110.1056/NEJMoa0802268Cans guía - os mellores amigos dos cegosArquivadoEscola de cans guía para cegos en Mortágua, PortugalArquivado"Tecnología para ciegos y deficientes visuales. Recopilación de recursos gratuitos en la Red""Colorino""‘COL.diesis’, escuchar los sonidos del color""COL.diesis: Transforming Colour into Melody and Implementing the Result in a Colour Sensor Device"o orixinal"Sistema de desarrollo de sinestesia color-sonido para invidentes utilizando un protocolo de audio""Enseñanza táctil - geometría y color. Juegos didácticos para niños ciegos y videntes""Sistema Constanz"L'ocupació laboral dels cecs a l'Estat espanyol està pràcticament equiparada a la de les persones amb visió, entrevista amb Pedro ZuritaONCE (Organización Nacional de Cegos de España)Prevención da cegueiraDescrición de deficiencias visuais (Disc@pnet)Braillín, un boneco atractivo para calquera neno, con ou sen discapacidade, que permite familiarizarse co sistema de escritura e lectura brailleAxudas Técnicas36838ID00897494007150-90057129528256DOID:1432HP:0000618D001766C10.597.751.941.162C97109C0155020