425 Can't open data connection for transfer of “/”FTP “425 Can't open data connection” only happens...

Airplane generations - how does it work?

Why does photorec keep finding files after I have filled the disk free space as root?

Saint abbreviation

What happened to my GE option?

How to not let the Identify spell spoil everything?

Square Root Distance from Integers

Count repetitions of an array

How to visualize the Riemann-Roch theorem from complex analysis or geometric topology considerations?

Current across a wire with zero potential difference

Why don't key signatures indicate the tonic?

Why zero tolerance on nudity in space?

How to assess the long-term stability of a college as part of a job search

How do you voice extended chords?

Can 5 Aarakocra PCs summon an Air Elemental?

Why would space fleets be aligned?

How much mayhem could I cause as a fish?

What is the difference between rolling more dice versus fewer dice?

How to make ice magic work from a scientific point of view?

Why did Luke use his left hand to shoot?

Can you tell from a blurry photo if focus was too close or too far?

Why is it that Bernie Sanders is always called a "socialist"?

Is using an 'empty' metaphor considered bad style?

How can the probability of a fumble decrease linearly with more dice?

How to access internet and run apt-get through a middle server?



425 Can't open data connection for transfer of “/”


FTP “425 Can't open data connection” only happens when using command promptError: The data connection could not be established: ECONNREFUSED - Connection refused by serverFTP - 425 Can't open data connection (Active Mode does not work)FTP with TLS doesn't work, nor can I change port in pure-ftpdFilezilla client cannot retrieve the list files from the serverDirectory listing from FileZilla Server fail with 425 Can't open data connection for transfer of “…”Errors in Configuring FileZilla FTP ServerCan't establish FTP connection outside networkFilezilla FTP Error 425Not able to access ftp from browser













0















I'm trying to solve this error searching the web, without any success.



The error is:




425 Can't open data connection for transfer of "/"




My software:




  • Windows server 2013 and last filezilla server


My topology:




  • Server wired to router - Router with a dynamic IP from ISP, dynamic dns updated.


My settings:




  • PASV mode with ports 51000-61000

  • Retrieve external ip with http://ip.filezilla-project.org/ip.php

  • Enabled FTP over TLS with port 990


Where I opened my ports




  • router: local and public 21, local 51000 public 51000-61000, local and public 990 (ALL tcp)

  • Windows Firewall: both directions, ports 21, 51000-61000, 990.


On my lan it works perfectly. I think there's something wrong with router port forwarding configuration. Here it is.



My port forwarding configuration on router



Is there something I'm doing wrong?



I add a log of my ftp server:



(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PBSZ 0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 PBSZ=0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PROT P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Protection level set to P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PWD
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 257 "/" is current directory.
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> TYPE I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Type set to I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PASV
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 227 Entering Passive Mode (my,ip,addr,ess,205,93)
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> MLSD
(000013)06/11/2017 21:51:07 - user (my.ip.add.ress)> 425 Can't open data connection for transfer of "/"


I add the ftp server configuration screens too just in case.



General Settings



PASV Mode settings



FTP over TLS










share|improve this question














bumped to the homepage by Community 2 mins ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
















  • What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

    – Martin Prikryl
    Nov 7 '17 at 12:57













  • Remote client and server have the same error. my,ip,addr,ess is the correct one.

    – Raikoug
    Nov 7 '17 at 16:56











  • Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

    – Martin Prikryl
    Nov 8 '17 at 7:07













  • Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

    – Raikoug
    Nov 8 '17 at 10:08











  • If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

    – Martin Prikryl
    Nov 8 '17 at 10:12


















0















I'm trying to solve this error searching the web, without any success.



The error is:




425 Can't open data connection for transfer of "/"




My software:




  • Windows server 2013 and last filezilla server


My topology:




  • Server wired to router - Router with a dynamic IP from ISP, dynamic dns updated.


My settings:




  • PASV mode with ports 51000-61000

  • Retrieve external ip with http://ip.filezilla-project.org/ip.php

  • Enabled FTP over TLS with port 990


Where I opened my ports




  • router: local and public 21, local 51000 public 51000-61000, local and public 990 (ALL tcp)

  • Windows Firewall: both directions, ports 21, 51000-61000, 990.


On my lan it works perfectly. I think there's something wrong with router port forwarding configuration. Here it is.



My port forwarding configuration on router



Is there something I'm doing wrong?



I add a log of my ftp server:



(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PBSZ 0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 PBSZ=0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PROT P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Protection level set to P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PWD
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 257 "/" is current directory.
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> TYPE I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Type set to I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PASV
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 227 Entering Passive Mode (my,ip,addr,ess,205,93)
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> MLSD
(000013)06/11/2017 21:51:07 - user (my.ip.add.ress)> 425 Can't open data connection for transfer of "/"


I add the ftp server configuration screens too just in case.



General Settings



PASV Mode settings



FTP over TLS










share|improve this question














bumped to the homepage by Community 2 mins ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
















  • What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

    – Martin Prikryl
    Nov 7 '17 at 12:57













  • Remote client and server have the same error. my,ip,addr,ess is the correct one.

    – Raikoug
    Nov 7 '17 at 16:56











  • Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

    – Martin Prikryl
    Nov 8 '17 at 7:07













  • Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

    – Raikoug
    Nov 8 '17 at 10:08











  • If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

    – Martin Prikryl
    Nov 8 '17 at 10:12
















0












0








0


1






I'm trying to solve this error searching the web, without any success.



The error is:




425 Can't open data connection for transfer of "/"




My software:




  • Windows server 2013 and last filezilla server


My topology:




  • Server wired to router - Router with a dynamic IP from ISP, dynamic dns updated.


My settings:




  • PASV mode with ports 51000-61000

  • Retrieve external ip with http://ip.filezilla-project.org/ip.php

  • Enabled FTP over TLS with port 990


Where I opened my ports




  • router: local and public 21, local 51000 public 51000-61000, local and public 990 (ALL tcp)

  • Windows Firewall: both directions, ports 21, 51000-61000, 990.


On my lan it works perfectly. I think there's something wrong with router port forwarding configuration. Here it is.



My port forwarding configuration on router



Is there something I'm doing wrong?



I add a log of my ftp server:



(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PBSZ 0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 PBSZ=0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PROT P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Protection level set to P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PWD
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 257 "/" is current directory.
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> TYPE I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Type set to I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PASV
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 227 Entering Passive Mode (my,ip,addr,ess,205,93)
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> MLSD
(000013)06/11/2017 21:51:07 - user (my.ip.add.ress)> 425 Can't open data connection for transfer of "/"


I add the ftp server configuration screens too just in case.



General Settings



PASV Mode settings



FTP over TLS










share|improve this question














I'm trying to solve this error searching the web, without any success.



The error is:




425 Can't open data connection for transfer of "/"




My software:




  • Windows server 2013 and last filezilla server


My topology:




  • Server wired to router - Router with a dynamic IP from ISP, dynamic dns updated.


My settings:




  • PASV mode with ports 51000-61000

  • Retrieve external ip with http://ip.filezilla-project.org/ip.php

  • Enabled FTP over TLS with port 990


Where I opened my ports




  • router: local and public 21, local 51000 public 51000-61000, local and public 990 (ALL tcp)

  • Windows Firewall: both directions, ports 21, 51000-61000, 990.


On my lan it works perfectly. I think there's something wrong with router port forwarding configuration. Here it is.



My port forwarding configuration on router



Is there something I'm doing wrong?



I add a log of my ftp server:



(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PBSZ 0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 PBSZ=0
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PROT P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Protection level set to P
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PWD
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 257 "/" is current directory.
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> TYPE I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 200 Type set to I
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> PASV
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> 227 Entering Passive Mode (my,ip,addr,ess,205,93)
(000013)06/11/2017 21:50:57 - user (my.ip.add.ress)> MLSD
(000013)06/11/2017 21:51:07 - user (my.ip.add.ress)> 425 Can't open data connection for transfer of "/"


I add the ftp server configuration screens too just in case.



General Settings



PASV Mode settings



FTP over TLS







networking ftp windows-server-2012-r2 filezilla






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 7 '17 at 12:40









RaikougRaikoug

11




11





bumped to the homepage by Community 2 mins ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.







bumped to the homepage by Community 2 mins ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.















  • What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

    – Martin Prikryl
    Nov 7 '17 at 12:57













  • Remote client and server have the same error. my,ip,addr,ess is the correct one.

    – Raikoug
    Nov 7 '17 at 16:56











  • Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

    – Martin Prikryl
    Nov 8 '17 at 7:07













  • Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

    – Raikoug
    Nov 8 '17 at 10:08











  • If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

    – Martin Prikryl
    Nov 8 '17 at 10:12





















  • What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

    – Martin Prikryl
    Nov 7 '17 at 12:57













  • Remote client and server have the same error. my,ip,addr,ess is the correct one.

    – Raikoug
    Nov 7 '17 at 16:56











  • Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

    – Martin Prikryl
    Nov 8 '17 at 7:07













  • Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

    – Raikoug
    Nov 8 '17 at 10:08











  • If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

    – Martin Prikryl
    Nov 8 '17 at 10:12



















What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

– Martin Prikryl
Nov 7 '17 at 12:57







What is the error from client-side? What client are you using? Does the my,ip,addr,ess in the 227 response match the IP that the client is connecting to?

– Martin Prikryl
Nov 7 '17 at 12:57















Remote client and server have the same error. my,ip,addr,ess is the correct one.

– Raikoug
Nov 7 '17 at 16:56





Remote client and server have the same error. my,ip,addr,ess is the correct one.

– Raikoug
Nov 7 '17 at 16:56













Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

– Martin Prikryl
Nov 8 '17 at 7:07







Well, the router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.

– Martin Prikryl
Nov 8 '17 at 7:07















Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

– Raikoug
Nov 8 '17 at 10:08





Well I guess I have few choices: 1) Change router (very hard one, since is ISP provided). --- 2) I have a DMZ option to bypass any port forwarding to my server. Very dangerous I think. --- 3) SFTP, I think all trafic just pass from port 22 or the custom 1 i chose..

– Raikoug
Nov 8 '17 at 10:08













If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

– Martin Prikryl
Nov 8 '17 at 10:12







If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.

– Martin Prikryl
Nov 8 '17 at 10:12












1 Answer
1






active

oldest

votes


















0














The router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.



If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.



See also How many data channel ports do I need for an FTPS server running behind NAT?






share|improve this answer























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "3"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1266298%2f425-cant-open-data-connection-for-transfer-of%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    The router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.



    If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.



    See also How many data channel ports do I need for an FTPS server running behind NAT?






    share|improve this answer




























      0














      The router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.



      If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.



      See also How many data channel ports do I need for an FTPS server running behind NAT?






      share|improve this answer


























        0












        0








        0







        The router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.



        If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.



        See also How many data channel ports do I need for an FTPS server running behind NAT?






        share|improve this answer













        The router mapping seems suspicious, as you have correctly guessed. It looks like you have all public ports in range 51000-61000 mapped to a single internal port 51000. What would explain, why the client is not able to connect to port 52573.



        If your router is not able to map a range of internal ports, you can configure your FTP server to use only a narrow range (like 51000-51010) and configure those ports one-by-one.



        See also How many data channel ports do I need for an FTPS server running behind NAT?







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Nov 8 '17 at 10:16









        Martin PrikrylMartin Prikryl

        11.1k43277




        11.1k43277






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Super User!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1266298%2f425-cant-open-data-connection-for-transfer-of%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Why not use the yoke to control yaw, as well as pitch and roll? Announcing the arrival of...

            Couldn't open a raw socket. Error: Permission denied (13) (nmap)Is it possible to run networking commands...

            VNC viewer RFB protocol error: bad desktop size 0x0I Cannot Type the Key 'd' (lowercase) in VNC Viewer...