Moderator: Project members
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Update produces «503 use AUTH first»
#1
Post
by mistersniffles » 2022-03-29 17:30
Hi,
Sorry if this has been asked a million times, I tries to use the search to no avail.
I had been using a beta version of Filezilla server for a LAN ftp server for a couple years, and I was told I should update due to important security fixes.
Upon installing 1.3.0. on windows 10, the new version had to be allowed through the windows firewall, the server itself had to be reestablished in Filezilla, but all user/pass and their respected paths carried over from the old version.
However, when I attempt to connect, Filezilla server refuses the connection citing «503 use AUTH first». This occurs for all previous user/pass, for new ones I attempted to create, and even if I set the users to «Do not require password»
I apologize if this is silly/simple. I’m not an IT person, and Filezilla is as technical as I get for networking (well, it used to be…). Alas, my higher ups expect to fix this problem (since my update caused it), and they’re VERY annoyed at the prospect of swapping around memory sticks for much longer. I’ve tried to reconfigure Filezilla using every tutorial I could find, and google-troubleshooted myself here. I thank you in advance.
-
boco
- Contributor
- Posts: 26707
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#2
Post
by boco » 2022-03-29 21:22
What are your listeners set to? Do you require FTP over TLS anywhere? The error occurs when you are trying to connect to the server (with enforced FTP over TLS) and attempting login (USER and PASS) without switching to FTP over TLS first (with AUTH TLS). That’s what the server is telling you — it won’t accept plain logins.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
botg
- Site Admin
- Posts: 35142
- Joined: 2004-02-23 20:49
- First name: Tim
- Last name: Kosse
- Contact:
Re: Update produces «503 use AUTH first»
#3
Post
by botg » 2022-03-29 23:19
Please note that the current year is 2022. There is no place in this world anymore (excluding museums) for clients that don’t use AUTH.
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#4
Post
by mistersniffles » 2022-03-30 08:39
Okay, so I ‘kinda» got it working in that Filezilla (client) will connect
Everything else (file explorer and vlc* on windows, AndFTP on android) continues to produce the 503
So to answer the below question, I’m guessing the above programs are attempting to use plain logins which filezilla won’t accept.
Is there a way to make it accept plain logins?
Or should I be searching the internet in attempts to reinstall the old beta version?**
*Currently the big problem is vlc. I’m in at 4am trying to decide if switching computers or running speaker wire through the entire building is easier, because music is needed in the dining room. It needs to work. One way or another. If I can’t find a digital solution, then it has to be physically…
**EDIT: By the dev’s (kinda unnecessarily snarky) comment, I just went ahead and assumed «NO» and «YES» in order. I found and reinstalled a pre 1.0 version, and like magic, everything works again. So thank you! It proved helpful (directly or otherwise…)
-
boco
- Contributor
- Posts: 26707
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#5
Post
by boco » 2022-03-30 13:18
Even the current 1.3.0 can still be used with plain, unencrypted connections, provided they are allowed in the global settings.
- listeners.jpg (45.3 KiB) Viewed 6596 times
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
oibaf
- Contributor
- Posts: 329
- Joined: 2021-07-16 21:02
- First name: Fabio
- Last name: Alemagna
- Contact:
Re: Update produces «503 use AUTH first»
#6
Post
by oibaf » 2022-03-30 13:21
mistersniffles wrote: ↑
2022-03-30 08:39
Is there a way to make it accept plain logins?
Yes. Boco gave you direction about that in his comment. Look at how your connection listeners are configured, and make sure that they’re set to «Explicit FTP over TLS and insecure plain FTP» rather than «Require explicit FTP over TLS».
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#7
Post
by mistersniffles » 2022-03-30 13:38
Even the current 1.3.0 can still be used with plain, unencrypted connections, provided they are allowed in the global settings.
Thank you! None of the tutorials stated anything like that. They all said to leave the TLS settings at default (which I followed). If I ever reupdate I can properly configure.
In hindsight I suppose it was pretty dumb to update without fully knowing what I was getting myself into. I guess I expected all settings to carry over and work since it was the same software and the ftp protocol hasn’t changed much in the 30 or so years I’ve been using it. Now I know. Chalk it up to ‘If not broke, don’t fix’
-
boco
- Contributor
- Posts: 26707
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#8
Post
by boco » 2022-03-30 17:20
The problem is that it isn’t an update at all. FileZilla Server 1.x is a new FTP server rewritten from scratch (based on libfilezilla). For that reason, old features are apparently removed, when in reality, they are simply not included in the rewrite. Some will return, but others are no longer relevant. Oh, and the new server is 64bit while the old one was 32bit.
The old code (0.x) is now completely abandoned, no fixes, no features, no security updates. You have to upgrade to be safe and supported.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#9
Post
by mistersniffles » 2022-03-30 18:31
As I stated, I was unaware, which is on me.
I will say that the installer demanded the previous version be uninstalled, which is behavior more in line with an update than completely new software.
But, I suppose the secondary lesson learned is ‘never let an installer uninstall something unless you’re absolutely sure doing so isn’t going to break something’
-
boco
- Contributor
- Posts: 26707
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#10
Post
by boco » 2022-03-30 23:17
The uninstallation part of the old version is more so that they are not trying to run on the same sockets (which are used exclusively and aren’t shareable). The upgrade preserved the old files for me, but that may have been changed (I started with 1.0.0-RC1).
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
Errors can be frustrating, especially if they are cryptic, like this:
Response: 150 opening data connection
Response: 503 Failure of data connection.
You know that the connection has failed (obviously!), but where?
Here at Bobcares.com, we help Web hosts, VPS users and website users troubleshoot such errors as part of our Outsourced Hosting Support services.
503 failure of data connection is a common error seen in FileZilla FTP client.
What is “503 failure of data connection”?
This error says that the FTP client was unable to contact the server’s FTP port, which means that the connection was blocked somewhere along the way.
It could be in the user’s PC, the modem, within the office network, ISP, or the server.
Here are the top 5 causes we’ve seen for this error, and how we fix them.
1. FTP client set to Active mode
FTP transfers can happen in Active or Passive mode.
To use Active FTP, users must configure their PCs to allow incoming connections FROM the server to a non-standard port (Port 21 is the standard FTP port. Port 30231 is a non-standard one).
Such an incoming connection closely resembles a cyber attack, and most firewalls block such non-standard connections.
We’ve seen cases where FTP users accidentally set their FTP mode to Active, causing the connection to fail.
To solve this, we help the users navigate the settings and choose Passive mode. We recommend this to be set by default for all FTP accounts.
2. Unsupported FTP features (eg. SFTP, SSL, etc.)
Some hosts offer SFTP or FTP over SSH. It uses port 22 instead of the traditional FTP port 21.
Similarly, some hosts offer FTP over SSL that uses port 990.
We’ve seen users mixing up these two, or even trying to establish a SSL/TLS connection where no such facility exists.
When users attempt to connect to an unsupported port, the server firewall will block that connection, and it’ll result in the error 503 failure of data connection.
To fix this we recommend customers to use the basic FTP protocol. To set it in FileZilla, go to File > Site Manager > Encryption > Only use plain FTP(insecure).
3. Blocked by firewall or antivirus software
The FileZilla error 503 failure of data connection goes on to state:
“This means that some router and/or firewall is still interfering with Filezilla.”
So, many users try to turn off their PC firewall, but still face issues.
We’ve seen that this is sometimes caused by Antivirus and Antispyware tools that acts as a second layer of firewall.
We resolve this by asking the users to turn of all security applications one by one. This helps us figure out exactly which app is causing the error, and fix its settings.
4. Blocked by intermediate routers or gateway devices
FTP users are sometimes unaware of firewalls that exist outside their PC.
This is especially true in large offices where people sit behind a local network (LAN).
We’ve seen routers, gateways or proxies that block outbound connections through port 22 (SFTP) or 990 (FTP over TLS).
To resolve this, we ask customers to turn off their gateways or routers, and establish a direct connection to the net. This helps us isolate where the block is happening.
Once we’ve confirmed that the issue is indeed with the intermediate devices, the users can work with their IT team to fix the device.
5. Port range not open at the server
The proper functioning of FTP requires that the server accept connections in all standard ports (eg. 21, 20, 22 and 990).
In addition, it also should accept connections on passive FTP ports, which varies from one server to another.
The trouble is, server firewalls allow only connections to the standard ports by default. If it’s not specifically set to allow connections to Passive FTP ports, the connections will fail.
We’ve seen newly setup VPS servers blocking Passive FTP ports.
Similarly, we’ve seen FTP ports of newly setup FTP servers in Windows IIS blocked as well in firewall.
To fix this, we add firewall exclusion rules:
- Linux IPtables – Add the rule
iptables -A INPUT -p tcp --match multiport --dports XXXXX:ZZZZZ -j ACCEPTwhere XXXXX is the starting port, and ZZZZZ is the ending port in the Passive port range. - Windows IIS – Go to Control Panel > System and Security > Windows Firewall > Advanced Settings > Inbound Rules > FTP server rules > Actions > Enable Rule.
Conclusion
503 failure of data connection is a common FTP error caused when the FTP connection to the server is blocked by some device or software between the PC and the server. Today we’ve seen the top 5 causes for this error, and how we fix them.
PREVENT YOUR SERVER FROM CRASHING!
Never again lose customers to poor server speed! Let us help you.
Our server experts will monitor & maintain your server 24/7 so that it remains lightning fast and secure.
SEE SERVER ADMIN PLANS
var google_conversion_label = «owonCMyG5nEQ0aD71QM»;
Я установил службы FTP-сервера на свою рабочую станцию IIS 8.5/Windows 7 и попытался подключиться к FTP с помощью FileZilla с моего ноутбука (клиент — Windows 8). Я попытался настроить параметры сети с помощью мастера сети на FileZilla, и вот вывод. [Я замаскировал IP с ‘x’ на выходе для конфиденциальности]
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.9.0.5
Response: 230 logged on.
Checking for correct external IP address
IP xxx.xxx.xxx.xxx bdj-bac-bgd-ic
Response: 200 OK
PREP 50307
Response: 200 Using port 50307, data token 860523756
PORT 139,102,163,82,196,131
Response: 200 PORT command successful
LIST
Response: 150 opening data connection
Response: 503 Failure of data connection.
Server sent unexpected reply.
Connection closed
Я также пытался подключиться к FTP с ноутбука с помощью Windows PowerShell, я смог подключиться, но при попытке получить файл я получаю следующую ошибку.
ftp> get file.jpg
200 PORT command successful.
125 Data connection already open; Transfer starting.
> .:No CSI structure available
550 Access is denied.
ftp: 131072 bytes received in 0.15Seconds 891.65Kbytes/sec.
Затем я запустил сессию SSH, используя PuTTY, и попробовал FTP на тот же сервер, и все работало нормально.
Я хочу, чтобы FTP работал с FileZilla на моем ноутбуке. Какой параметр конфигурации может отсутствовать?
I installed FTP Server Services on my IIS 8.5/Windows 7 workstation, and tried to FTP using FileZilla from my laptop (client — Windows 8). I tried to configure the Network Settings using Network Wizard on FileZilla, and here is the output. [I have masked the IP with ‘x’ on the output for privacy]
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.9.0.5
Response: 230 logged on.
Checking for correct external IP address
IP xxx.xxx.xxx.xxx bdj-bac-bgd-ic
Response: 200 OK
PREP 50307
Response: 200 Using port 50307, data token 860523756
PORT 139,102,163,82,196,131
Response: 200 PORT command successful
LIST
Response: 150 opening data connection
Response: 503 Failure of data connection.
Server sent unexpected reply.
Connection closed
I also tried to FTP from the laptop using Windows PowerShell, I was able to connect but when I try to get file, I get the following error.
ftp> get file.jpg
200 PORT command successful.
125 Data connection already open; Transfer starting.
> .:No CSI structure available
550 Access is denied.
ftp: 131072 bytes received in 0.15Seconds 891.65Kbytes/sec.
Then I started an SSH session using PuTTY, and tried FTP to the same server & everything worked fine.
I want FTP to work from FileZilla on my laptop. What configuration setting may be missing?
Moderator: Project members
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Update produces «503 use AUTH first»
#1
Post
by mistersniffles » 2022-03-29 17:30
Hi,
Sorry if this has been asked a million times, I tries to use the search to no avail.
I had been using a beta version of Filezilla server for a LAN ftp server for a couple years, and I was told I should update due to important security fixes.
Upon installing 1.3.0. on windows 10, the new version had to be allowed through the windows firewall, the server itself had to be reestablished in Filezilla, but all user/pass and their respected paths carried over from the old version.
However, when I attempt to connect, Filezilla server refuses the connection citing «503 use AUTH first». This occurs for all previous user/pass, for new ones I attempted to create, and even if I set the users to «Do not require password»
I apologize if this is silly/simple. I’m not an IT person, and Filezilla is as technical as I get for networking (well, it used to be…). Alas, my higher ups expect to fix this problem (since my update caused it), and they’re VERY annoyed at the prospect of swapping around memory sticks for much longer. I’ve tried to reconfigure Filezilla using every tutorial I could find, and google-troubleshooted myself here. I thank you in advance.
-
boco
- Contributor
- Posts: 26451
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#2
Post
by boco » 2022-03-29 21:22
What are your listeners set to? Do you require FTP over TLS anywhere? The error occurs when you are trying to connect to the server (with enforced FTP over TLS) and attempting login (USER and PASS) without switching to FTP over TLS first (with AUTH TLS). That’s what the server is telling you — it won’t accept plain logins.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
botg
- Site Admin
- Posts: 34742
- Joined: 2004-02-23 20:49
- First name: Tim
- Last name: Kosse
- Contact:
Re: Update produces «503 use AUTH first»
#3
Post
by botg » 2022-03-29 23:19
Please note that the current year is 2022. There is no place in this world anymore (excluding museums) for clients that don’t use AUTH.
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#4
Post
by mistersniffles » 2022-03-30 08:39
Okay, so I ‘kinda» got it working in that Filezilla (client) will connect
Everything else (file explorer and vlc* on windows, AndFTP on android) continues to produce the 503
So to answer the below question, I’m guessing the above programs are attempting to use plain logins which filezilla won’t accept.
Is there a way to make it accept plain logins?
Or should I be searching the internet in attempts to reinstall the old beta version?**
*Currently the big problem is vlc. I’m in at 4am trying to decide if switching computers or running speaker wire through the entire building is easier, because music is needed in the dining room. It needs to work. One way or another. If I can’t find a digital solution, then it has to be physically…
**EDIT: By the dev’s (kinda unnecessarily snarky) comment, I just went ahead and assumed «NO» and «YES» in order. I found and reinstalled a pre 1.0 version, and like magic, everything works again. So thank you! It proved helpful (directly or otherwise…)
-
boco
- Contributor
- Posts: 26451
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#5
Post
by boco » 2022-03-30 13:18
Even the current 1.3.0 can still be used with plain, unencrypted connections, provided they are allowed in the global settings.
- listeners.jpg (45.3 KiB) Viewed 3656 times
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
oibaf
- Contributor
- Posts: 265
- Joined: 2021-07-16 21:02
- First name: Fabio
- Last name: Alemagna
- Contact:
Re: Update produces «503 use AUTH first»
#6
Post
by oibaf » 2022-03-30 13:21
mistersniffles wrote: ↑
2022-03-30 08:39
Is there a way to make it accept plain logins?
Yes. Boco gave you direction about that in his comment. Look at how your connection listeners are configured, and make sure that they’re set to «Explicit FTP over TLS and insecure plain FTP» rather than «Require explicit FTP over TLS».
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#7
Post
by mistersniffles » 2022-03-30 13:38
Even the current 1.3.0 can still be used with plain, unencrypted connections, provided they are allowed in the global settings.
Thank you! None of the tutorials stated anything like that. They all said to leave the TLS settings at default (which I followed). If I ever reupdate I can properly configure.
In hindsight I suppose it was pretty dumb to update without fully knowing what I was getting myself into. I guess I expected all settings to carry over and work since it was the same software and the ftp protocol hasn’t changed much in the 30 or so years I’ve been using it. Now I know. Chalk it up to ‘If not broke, don’t fix’
-
boco
- Contributor
- Posts: 26451
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#8
Post
by boco » 2022-03-30 17:20
The problem is that it isn’t an update at all. FileZilla Server 1.x is a new FTP server rewritten from scratch (based on libfilezilla). For that reason, old features are apparently removed, when in reality, they are simply not included in the rewrite. Some will return, but others are no longer relevant. Oh, and the new server is 64bit while the old one was 32bit.
The old code (0.x) is now completely abandoned, no fixes, no features, no security updates. You have to upgrade to be safe and supported.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
-
mistersniffles
- 500 Command not understood
- Posts: 4
- Joined: 2022-03-29 17:11
- First name: J
- Last name: Vernet
Re: Update produces «503 use AUTH first»
#9
Post
by mistersniffles » 2022-03-30 18:31
As I stated, I was unaware, which is on me.
I will say that the installer demanded the previous version be uninstalled, which is behavior more in line with an update than completely new software.
But, I suppose the secondary lesson learned is ‘never let an installer uninstall something unless you’re absolutely sure doing so isn’t going to break something’
-
boco
- Contributor
- Posts: 26451
- Joined: 2006-05-01 03:28
- Location: Germany
Re: Update produces «503 use AUTH first»
#10
Post
by boco » 2022-03-30 23:17
The uninstallation part of the old version is more so that they are not trying to run on the same sockets (which are used exclusively and aren’t shareable). The upgrade preserved the old files for me, but that may have been changed (I started with 1.0.0-RC1).
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###
I have an FTP server running on an AWS virtual server. We have about 100 users connecting to it over the course of a day, uploading images and other files. All but one are working perfectly. Files come in, not a problem.
We have 1 single user that causes the following log lines to be generated — the username and IP has been removed intentionally and the «***» has been added to highlight the error line:
> 227 Entering Passive Mode (54,79,122,6,195,96)
> STOR media/UV1358A_3.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_3.jpg"
> 226 Successfully transferred "/media/UV1358A_3.jpg"
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,141)
> STOR media/UV1358A_4.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_4.jpg"
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,136)
> 226 Successfully transferred ""
> STOR media/UV1358A_5.jpg
***********************************************
> 503 Bad sequence of commands.
***********************************************
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,80)
> PORT 122,99,115,5,212,227
> 200 Port command successful
> PORT 122,99,115,5,226,227
> 200 Port command successful
> PORT 122,99,115,5,130,124
> 200 Port command successful
> STOR media/UV1358A_9.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_9.jpg"
> PORT 122,99,115,5,152,62
> 200 Port command successful
> STOR media/UV1358A_10.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_10.jpg"
> PORT 122,99,115,5,161,49
> 200 Port command successful
We’re using FileZilla Server 0.9.55 on a Windows 2012 box.
My question, as stated in the title is essentially.. Is this our issue on the server end, or is this theirs?
Is this 503 error always caused by the FTP client screwing something up or is there the possibility that the FTP server is interpreting something wrongly?
I’m happy to go back to the customer and say «It is our issue», but I suspect it’s not at our end.
Thanks
I have an FTP server running on an AWS virtual server. We have about 100 users connecting to it over the course of a day, uploading images and other files. All but one are working perfectly. Files come in, not a problem.
We have 1 single user that causes the following log lines to be generated — the username and IP has been removed intentionally and the «***» has been added to highlight the error line:
> 227 Entering Passive Mode (54,79,122,6,195,96)
> STOR media/UV1358A_3.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_3.jpg"
> 226 Successfully transferred "/media/UV1358A_3.jpg"
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,141)
> STOR media/UV1358A_4.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_4.jpg"
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,136)
> 226 Successfully transferred ""
> STOR media/UV1358A_5.jpg
***********************************************
> 503 Bad sequence of commands.
***********************************************
> PASV
> 227 Entering Passive Mode (54,79,122,6,195,80)
> PORT 122,99,115,5,212,227
> 200 Port command successful
> PORT 122,99,115,5,226,227
> 200 Port command successful
> PORT 122,99,115,5,130,124
> 200 Port command successful
> STOR media/UV1358A_9.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_9.jpg"
> PORT 122,99,115,5,152,62
> 200 Port command successful
> STOR media/UV1358A_10.jpg
> 150 Opening data channel for file upload to server of "/media/UV1358A_10.jpg"
> PORT 122,99,115,5,161,49
> 200 Port command successful
We’re using FileZilla Server 0.9.55 on a Windows 2012 box.
My question, as stated in the title is essentially.. Is this our issue on the server end, or is this theirs?
Is this 503 error always caused by the FTP client screwing something up or is there the possibility that the FTP server is interpreting something wrongly?
I’m happy to go back to the customer and say «It is our issue», but I suspect it’s not at our end.
Thanks
Errors can be frustrating, especially if they are cryptic, like this:
Response: 150 opening data connection
Response: 503 Failure of data connection.
You know that the connection has failed (obviously!), but where?
Here at Bobcares.com, we help Web hosts, VPS users and website users troubleshoot such errors as part of our Outsourced Hosting Support services.
503 failure of data connection is a common error seen in FileZilla FTP client.
What is “503 failure of data connection”?
This error says that the FTP client was unable to contact the server’s FTP port, which means that the connection was blocked somewhere along the way.
It could be in the user’s PC, the modem, within the office network, ISP, or the server.
Here are the top 5 causes we’ve seen for this error, and how we fix them.
1. FTP client set to Active mode
FTP transfers can happen in Active or Passive mode.
To use Active FTP, users must configure their PCs to allow incoming connections FROM the server to a non-standard port (Port 21 is the standard FTP port. Port 30231 is a non-standard one).
Such an incoming connection closely resembles a cyber attack, and most firewalls block such non-standard connections.
We’ve seen cases where FTP users accidentally set their FTP mode to Active, causing the connection to fail.
To solve this, we help the users navigate the settings and choose Passive mode. We recommend this to be set by default for all FTP accounts.
2. Unsupported FTP features (eg. SFTP, SSL, etc.)
Some hosts offer SFTP or FTP over SSH. It uses port 22 instead of the traditional FTP port 21.
Similarly, some hosts offer FTP over SSL that uses port 990.
We’ve seen users mixing up these two, or even trying to establish a SSL/TLS connection where no such facility exists.
When users attempt to connect to an unsupported port, the server firewall will block that connection, and it’ll result in the error 503 failure of data connection.
To fix this we recommend customers to use the basic FTP protocol. To set it in FileZilla, go to File > Site Manager > Encryption > Only use plain FTP(insecure).
3. Blocked by firewall or antivirus software
The FileZilla error 503 failure of data connection goes on to state:
“This means that some router and/or firewall is still interfering with Filezilla.”
So, many users try to turn off their PC firewall, but still face issues.
We’ve seen that this is sometimes caused by Antivirus and Antispyware tools that acts as a second layer of firewall.
We resolve this by asking the users to turn of all security applications one by one. This helps us figure out exactly which app is causing the error, and fix its settings.
4. Blocked by intermediate routers or gateway devices
FTP users are sometimes unaware of firewalls that exist outside their PC.
This is especially true in large offices where people sit behind a local network (LAN).
We’ve seen routers, gateways or proxies that block outbound connections through port 22 (SFTP) or 990 (FTP over TLS).
To resolve this, we ask customers to turn off their gateways or routers, and establish a direct connection to the net. This helps us isolate where the block is happening.
Once we’ve confirmed that the issue is indeed with the intermediate devices, the users can work with their IT team to fix the device.
5. Port range not open at the server
The proper functioning of FTP requires that the server accept connections in all standard ports (eg. 21, 20, 22 and 990).
In addition, it also should accept connections on passive FTP ports, which varies from one server to another.
The trouble is, server firewalls allow only connections to the standard ports by default. If it’s not specifically set to allow connections to Passive FTP ports, the connections will fail.
We’ve seen newly setup VPS servers blocking Passive FTP ports.
Similarly, we’ve seen FTP ports of newly setup FTP servers in Windows IIS blocked as well in firewall.
To fix this, we add firewall exclusion rules:
- Linux IPtables – Add the rule
iptables -A INPUT -p tcp --match multiport --dports XXXXX:ZZZZZ -j ACCEPTwhere XXXXX is the starting port, and ZZZZZ is the ending port in the Passive port range. - Windows IIS – Go to Control Panel > System and Security > Windows Firewall > Advanced Settings > Inbound Rules > FTP server rules > Actions > Enable Rule.
Conclusion
503 failure of data connection is a common FTP error caused when the FTP connection to the server is blocked by some device or software between the PC and the server. Today we’ve seen the top 5 causes for this error, and how we fix them.
PREVENT YOUR SERVER FROM CRASHING!
Never again lose customers to poor server speed! Let us help you.
Our server experts will monitor & maintain your server 24/7 so that it remains lightning fast and secure.
SEE SERVER ADMIN PLANS
var google_conversion_label = «owonCMyG5nEQ0aD71QM»;
Я установил службы FTP-сервера на свою рабочую станцию IIS 8.5/Windows 7 и попытался подключиться к FTP с помощью FileZilla с моего ноутбука (клиент — Windows 8). Я попытался настроить параметры сети с помощью мастера сети на FileZilla, и вот вывод. [Я замаскировал IP с ‘x’ на выходе для конфиденциальности]
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.9.0.5
Response: 230 logged on.
Checking for correct external IP address
IP xxx.xxx.xxx.xxx bdj-bac-bgd-ic
Response: 200 OK
PREP 50307
Response: 200 Using port 50307, data token 860523756
PORT 139,102,163,82,196,131
Response: 200 PORT command successful
LIST
Response: 150 opening data connection
Response: 503 Failure of data connection.
Server sent unexpected reply.
Connection closed
Я также пытался подключиться к FTP с ноутбука с помощью Windows PowerShell, я смог подключиться, но при попытке получить файл я получаю следующую ошибку.
ftp> get file.jpg
200 PORT command successful.
125 Data connection already open; Transfer starting.
> .:No CSI structure available
550 Access is denied.
ftp: 131072 bytes received in 0.15Seconds 891.65Kbytes/sec.
Затем я запустил сессию SSH, используя PuTTY, и попробовал FTP на тот же сервер, и все работало нормально.
Я хочу, чтобы FTP работал с FileZilla на моем ноутбуке. Какой параметр конфигурации может отсутствовать?
I installed FTP Server Services on my IIS 8.5/Windows 7 workstation, and tried to FTP using FileZilla from my laptop (client — Windows 8). I tried to configure the Network Settings using Network Wizard on FileZilla, and here is the output. [I have masked the IP with ‘x’ on the output for privacy]
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.9.0.5
Response: 230 logged on.
Checking for correct external IP address
IP xxx.xxx.xxx.xxx bdj-bac-bgd-ic
Response: 200 OK
PREP 50307
Response: 200 Using port 50307, data token 860523756
PORT 139,102,163,82,196,131
Response: 200 PORT command successful
LIST
Response: 150 opening data connection
Response: 503 Failure of data connection.
Server sent unexpected reply.
Connection closed
I also tried to FTP from the laptop using Windows PowerShell, I was able to connect but when I try to get file, I get the following error.
ftp> get file.jpg
200 PORT command successful.
125 Data connection already open; Transfer starting.
> .:No CSI structure available
550 Access is denied.
ftp: 131072 bytes received in 0.15Seconds 891.65Kbytes/sec.
Then I started an SSH session using PuTTY, and tried FTP to the same server & everything worked fine.
I want FTP to work from FileZilla on my laptop. What configuration setting may be missing?
I am using FileZilla FTP Server windows edition.
I wrote a java programe to connect to my FTP server, and send FTP raw commands to the server via socket.
when I send «LIST», I got 503 error :
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> Connected, sending welcome message...
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> 220-FileZilla Server version 0.9.37 beta
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> 220 Please visit http://sourceforge.net/projects/filezilla/
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> USER ggfan
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> 331 Password required for ggfan
(000002)2011/6/1 10:46:56 - (not logged in) (127.0.0.1)> PASS *****
(000002)2011/6/1 10:46:56 - ggfan (127.0.0.1)> 230 Logged on
(000002)2011/6/1 10:46:56 - ggfan (127.0.0.1)> LIST
(000002)2011/6/1 10:46:56 - ggfan (127.0.0.1)> 503 Bad sequence of commands.
(000002)2011/6/1 10:46:56 - ggfan (127.0.0.1)> QUIT
(000002)2011/6/1 10:46:56 - ggfan (127.0.0.1)> 221 Goodbye
please help
best regards
asked Jun 1, 2011 at 3:09
CaiNiaoCoderCaiNiaoCoder
3,2199 gold badges51 silver badges81 bronze badges
1
I believe that in order to do a data transfer (and LIST is a data transfer command) you must issue a PORT command first to establish the data connection. The best way to figure this out is to either read the relevant spec, or (more fun) fire up Wireshark and see what actually happens using a working FTP client.
answered Jun 1, 2011 at 3:39
Jim GarrisonJim Garrison
84.9k20 gold badges153 silver badges190 bronze badges
1
- Remove From My Forums
-
Question
-
User1670423274 posted
Hi,
i have created new ftp site and I set Basic Autenthication for all user with read/write permissions.
I try connect with dos command from pc where is ftp site and it’s all ok with
ftp.website.it|administrator
When I try to connect with my ftp client(filezilla) i receive this message
<DIR> <DIR> <DIR> <DIR>
State: risolution address IP ftp2.website.it
State: connecting to 192.168.1.9:21…
State: connection established…
response: 220 Microsoft FTP Service
command: USER administrator
response: 331 Valid hostname is expected.
command: PASS ********
response: 503 Login with USER first.
Error: grave error
</DIR></DIR></DIR></DIR>
Error : impossible connect to server
If I try to connect with dos cmd with ftp.website.it|administrator it’s ok, if i try onluy with administrator i have same error.
Thx
Answers
-
-
Marked as answer by
Tuesday, September 28, 2021 12:00 AM
-
Marked as answer by
Здравствуйте уважаемые. Столкнулся с проблемой, которую не могу решить уже больше недели. HELP!!!
Работаю за ротером ASUS WL-500gP. Прошивка от Олега. В сети три компа – два по меди + один Wi-Fi. Сетка работает, интернет раздается. Все путем – жалоб нет… Вернее не было.
По долгу своей службы часто отдаю файлы на сервера заказчиков посредством ftp.
FTP – клиент использую Total Commander.
С недавнего времени FTP клиент напроч отказывается отдавать файлы. При попытке залить файл на ftp сервер происходит подключение, далее показывает содержание каталога, а при попытке скопировать файл на сервер отдает 512 байт и отключается с ошибкой (503).
В итоге, в папке в которую нужно положить файл образовывается одноименный битый файл размером 512 байт, который потом можно только удалить.
Корбиной пользуюсь около 1,5 лет, иногда описаные выше симптомы появлялись, но в течение дня пропадали. И проблем в общем то небыло. Вернее они были, но по срокам не критичные.
На текущий момент имею проблему уже около 10 дней – не могу передать файлы по ftp.
Решаю вопрос путем поднятия VPN на компе без роутера, что вызывает некоторые неудобства.
Буду рад, если кто сможе помоч решить проблему.
Что самое мистическое ведь работало же!!!
1. Роутер не менялся, прошивка не менялась, настройки не менялись, порты на роутере не менялись…
Причем самое интересное то, что 3 или 4 января – вечером получалось передавать через роутер – потом снова нет.
FTP клиенты работали с трех компьютеров – теперь ни с одного. (FileZila – тоже не работоспособна)
2. На сервера подключаюсь через клиент без проблем, скачиваю файлы любого размера – без проблем. Отдать не могу…
3. Пробовал пассивные – активные и прочие режимы.
4. Сервера находятся у разных хостинг провайдеров – ни на кого не могу загрузить.
5. Подключив Корбину в компьютер напрямую – могу отдать файл.
6. Глючит только при передачи по FTP. Все сетевые программы на 3 компьютерах (браузеры, аськи, игрушки, почтовики, торренты, DC++ и пр.) работают без проблем.
7. Включена услуга статический IP (с ним работало)
8. В личном кабинете отключена фильтрация.
9. Территориально нахожусь Москва Алтуфьево [Alt]
Писал в Корбиновский саппорт, чето там посоветовали – не помогло.
———Log FileZila—————————
Соединяюсь с probe.filezilla-project.org
Ответ: 220 FZ router and firewall tester ready
USER FileZilla
Ответ: 331 Give any password.
PASS 3.1.6
Ответ: 230 logged on.
Проверка корректного внешнего IP
IP **.***.***.*** hi-bah-cdj-cbj
Ответ: 200 OK
PREP 4874
Ответ: 200 Using port 4874, data token 1856034670
PORT 78,107,239,219,19,10
Ответ: 200 PORT command successful
LIST
Ответ: 150 opening data connection
Ответ: 503 Failure of data connection.
Сервер отправил неправильный ответ.
Соединение закрыто
———————————————-
Подключаюсь к серверу v25-u.valuehost.ru
Трассировка маршрута к v25-u.valuehost.ru [217.112.42.89]
с максимальным числом прыжков 30:
1 <1 мс <1 мс <1 мс my.router [192.168.1.1]
2 * * * Превышен интервал ожидания для запроса.
3 * * * Превышен интервал ожидания для запроса.
4 2 ms 2 ms 2 ms rostokino-bb-te4-1.msk.corbina.net [85.21.226.89
]
5 2 ms 2 ms 2 ms izm-bb-ten3-1.msk.corbina.net [195.14.54.239]
6 2 ms 2 ms 2 ms mo-bb-teng2-1.msk.corbina.net [195.14.54.250]
7 2 ms 2 ms 2 ms 78.107.184.33
8 2 ms 2 ms 2 ms m9-bb-teng3-1.msk.corbina.net [195.14.54.233]
9 2 ms 2 ms 2 ms Corbina-lgw.Moscow.gldn.net [195.239.9.225]
10 44 ms 5 ms 50 ms cat02.Moscow.gldn.net [195.239.12.229]
11 2 ms 2 ms 2 ms 81.211.8.246
12 2 ms 2 ms 2 ms v25-u.valuehost.ru [217.112.42.89]
Аааа! Помогите кто может! С уважением и надеждой…