N5200PRO ftp problems

[Jeanius]

Hey all,

Trying to get my NAS ftp up, running into sort of a brick wall. I've got an N5200PRO with a 5-disk RAID5, activated ftp server in the web service, gave users/folders proper ACL, changed the port and opened it on my router, forwarded it to my NAS's IP, and nothing. No one can log in, much less see it (ping it), and I'm nearly out of ideas. Comcast is my provider, and while they do provide me with a dynamic IP, it wasn't changing while I was testing the ftp. Any advice?

Thanks much.

[Splash]

can you connect to the ftp server locally? If not there's a problem with the ftp setup, if so you have a problem with your router/firewall setup.

[Jeanius]

I can map the NAS as a network drive and connect to it that way, but I can't seem to connect to it through ftp, even from behind my router. Can't seem to connect to it by using my router's IP, or the local 192.168.x.x address. My ftp server settings are as follows:

Ftp enabled.
Secure (explicit) Ftp enabled.
port (doesnt matter, can't connect to any of em)
ftp encode UTF-8
No anon access.
Auto rename.
Unlim BW.

Using filezilla to connect, setting servertype to FTPES, normal logontype. Not too sure where to go from here, I'm strapped for ideas at this point. Are there any other settings on the NAS pertinent to the ftp besides ACL?

[Splash]

ok - so when you try to open an ftp connection in filezilla what do you get? Can you post the dialogue between your machine and the n5200?

For example - I just tested and got

Status:	Resolving address of n5200
Status:	Connecting to 192.168.1.99:21...
Status:	Connection established, waiting for welcome message...
Response:	220-FTP server ready.
Response:	220 This is a private system - No anonymous login
Command:	USER splash
Response:	331 User splash OK. Password required
Command:	PASS *********
Response:	230-User splash has group access to:  smbusers
Response:	230 OK. Current restricted directory is /
Command:	SYST
Response:	215 UNIX Type: L8
Command:	FEAT
Response:	211-Extensions supported:
Response:	 EPRT
Response:	 IDLE
Response:	 MDTM
Response:	 SIZE
Response:	 REST STREAM
Response:	 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response:	 MLSD
Response:	 ESTP
Response:	 PASV
Response:	 EPSV
Response:	 SPSV
Response:	 ESTA
Response:	 AUTH TLS
Response:	 PBSZ
Response:	 PROT
Response:	 UTF8
Response:	211 End.
Command:	OPTS UTF8 ON
Response:	200 OK, UTF-8 enabled
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is your current location
Command:	TYPE I
Response:	200 TYPE is now 8-bit binary
Command:	PASV
Response:	227 Entering Passive Mode (192,168,1,99,96,46)
Command:	MLSD
Response:	150 Accepted data connection
Response:	226-ASCII
Response:	226-Options: -l 
Response:	226 4 matches total
Status:	Directory listing successful
Status:	Disconnected from server
Status:	Resolving address of n5200
Status:	Connecting to 192.168.1.99:21...
Status:	Connection established, waiting for welcome message...
Response:	220-FTP server ready.
Response:	220 This is a private system - No anonymous login
Command:	USER splash
Response:	331 User splash OK. Password required
Command:	PASS *********
Response:	230-User splash has group access to:  smbusers
Response:	230 OK. Current restricted directory is /
Command:	OPTS UTF8 ON
Response:	200 OK, UTF-8 enabled
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is your current location
Status:	Directory listing successful

EDIT - also which firmware are you running?

[Jeanius]

OK, I'm able to connect behind my router at IP 192.168.2.254. The output is as follows:

Status:	Connecting to 192.168.2.254:9001...
Status:	Connection established, waiting for welcome message...
Response:	220-FTP server ready.
Response:	220 This is a private system - No anonymous login
Command:	AUTH TLS
Response:	234 AUTH TLS OK.
Status:	Initializing TLS...
Status:	Verifying certificate...
Command:	USER Jeanius
Status:	TLS/SSL connection established.
Response:	331 User Jeanius OK. Password required
Command:	PASS *******
Response:	230-User Jeanius has group access to:  smbusers
Response:	230 OK. Current restricted directory is /
Command:	SYST
Response:	215 UNIX Type: L8
Command:	FEAT
Response:	211-Extensions supported:
Response:	 EPRT
Response:	 IDLE
Response:	 MDTM
Response:	 SIZE
Response:	 REST STREAM
Response:	 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response:	 MLSD
Response:	 ESTP
Response:	 PASV
Response:	 EPSV
Response:	 SPSV
Response:	 ESTA
Response:	 AUTH TLS
Response:	 PBSZ
Response:	 PROT
Response:	 UTF8
Response:	211 End.
Command:	OPTS UTF8 ON
Response:	200 OK, UTF-8 enabled
Command:	PBSZ 0
Response:	200 PBSZ=0
Command:	PROT P
Response:	534 Fallback to [C]
Status:	Connected
Status:	Retrieving directory listing...
Command:	CWD \Chunko
Response:	550 Prohibited file name: \Chunko
Command:	PWD
Response:	257 "/" is your current location
Command:	TYPE I
Response:	200 TYPE is now 8-bit binary
Command:	PASV
Response:	227 Entering Passive Mode (192,168,2,254,45,28)
Command:	MLSD
Response:	150 Accepted data connection
Response:	226-ASCII
Response:	226-Options: -l 
Response:	226 4 matches total
Status:	Directory listing successful

Though I still can't connect to it using my router's IP. I've tried forwarding the port to the above address (192.168.2.254) and the IP that is identified by the router (192.168.2.3), but neither seems to take hold, and I just encounter a timeout.

[Jeanius]

Woops, and firmware V2.01.09.

[Splash]

ok, we have the same firmware and hardware version, and we can see that the ftp server is working so your issue likely lies with either your network setup or your ISP.

What make/model router do you have?

[Jeanius]

I've got a belkin wireless G router, F5D7230-4 v8000. Port forwarding all seems to be in order, port 9001 is being forwarded to 192.168.2.254.

[Splash]

hmm... Well you can safely say that your issue isn't with the n5200. Are you able to have someone try to telnet to your WAN ip address on port 9001 to see if that works? Alternatively could you give https://www.grc.com/x/portprobe=9001 a whirl? This will see if port 9001 is serving on your WAN ip.

Other than that - how is your network configured? Do you have a seperate firewall or just the one built into your router?

[Jeanius]

Sorry for the delay, duty calls.

I've tested 9001 before, it came back as stealth, so I'm not too confident that the N5200 is actually acting properly on that port (either that, or my router has a bone to pick with 9001). My network isn't all that complicated, firewall is handled by the router, and it is set as DCHP. I'll try to get someone to telnet in, but I don't think that would happen until tomorrow. I appreciate your help thus far!

[Splash]

No problem - your n5200 is working fine on 9100 or you wouldn't be able to contact it as you did above on your LAN. If 9001 is coming back as stealth then your port forwarding isn't working - the port needs to be open for people to be able to connect.

[Jeanius]

So I can open the port on the router and forward it to my comp's IP, and GRC will recognize it as closed (I do have a firewall up), but when I specify the NAS' IP, the port comes back as stealth. I've tried the 192.168.2.3 (as reported by the router) and 192.168.2.254 (for web interface), neither seems to work. The MAC address the router reports for the .2.3 matches the NAS, and ftp settings are secure (explicit) and port 9001. Very weird...