FTP connection issue

Question

FTP connection issue

Peter_1985 2,736

Hi,
I've enabled traffic of TCP and UDP protocols on port 22 of the relevant IP, the server is having the proper certificate working fine with the Email server. But now I cannot connect to server SFTP even if I've set up FTP with SSL on the server.

Bruce Zhang-MSFT 3,771 Reputation points

2022-04-18T02:05:17.307+00:00

Hi @Peter_1985 ,

I think first of all you should use FTP to connect to the server, so that you can determine whether the client can connect to the server, so consider that maybe the SSL verification fails and the SFTP cannot connect.

Another thing is how you connect to server SFTP and is there any error message when you connect failed? Check your FTP site log to see if FTP site receive the client request. If the site has received, please check event viewer to get more detailed error message.

3 answers

Your answer

Bruce Zhang-MSFT 3,771 Reputation points

2022-04-18T02:05:17.307+00:00

Hi @Peter_1985 ,

I think first of all you should use FTP to connect to the server, so that you can determine whether the client can connect to the server, so consider that maybe the SSL verification fails and the SFTP cannot connect.

Another thing is how you connect to server SFTP and is there any error message when you connect failed? Check your FTP site log to see if FTP site receive the client request. If the site has received, please check event viewer to get more detailed error message.

Answer 1

Please be specific. You are referencing 2 different protocols.

FTP listens on port 21. Typically, FTP is installed as part of IIS and is hosted by the "Microsoft FTP Service".
FTPS is FTP over SSL on port 21 and is also hosted by IIS.
SFTP listens on port 22. It is typically implemented as part of the OpenSSH feature of Windows.

https://ourcodeworld.com/articles/read/181/what-is-ftps-ftp-sftp-and-what-is-the-difference-between-them

You have to do basic troubleshooting yourself. Forum users have no way of knowing what you have configured on your server.

Use Computer Management and verify that the service is running.

Use the netstat tool to verify that your system has a process listening on the correct port.

https://www.configserverfirewall.com/windows-10/netstat-command-to-check-open-ports-in-windows/

On a different machine use Powershell's Test-NetConnection cmdlet to test connectivity to the port.

https://support.solarwinds.com/SuccessCenter/s/article/Use-PowerShell-to-test-that-a-port-is-open-on-a-server?language=en_US

Peter_1985 2,736 Reputation points

2022-04-18T03:35:41.447+00:00

Hi all,
I used Test-NetConnection on Powershell to test it on port 21 and got that TcpTestSucceeded is false. How to identify issue of the certificate?
MotoX80 36,291 Reputation points

2022-04-18T12:25:39.71+00:00

What's the issue? You have not shared any error message or screen snapshot or said what program you are using.

We can't help you if you do not provide details.

Answer 2

Peter_1985 2,736

I cannot connect to that host name and want to know how to verify if the certificate is correct or not.

MotoX80 36,291 Reputation points

2022-04-18T12:58:20.347+00:00

how to verify if the certificate is correct

On the server, run the IIS manager and view the certificate.
Peter_1985 2,736 Reputation points

2022-04-27T07:17:56.767+00:00

Hi,
What other check should be done on this?
MotoX80 36,291 Reputation points

2022-04-27T16:17:14.597+00:00

We do not know what your problem is. Are you having a connection problem or a certificate problem?

We don't know if you are running SFTP/OpenSSH or FTPS/IIS. In your initial question you said that you enabled traffic on port 22 but then replied that you used Test-Netconnection on port 21.

You posted an image of a message box but you did not explain what program generated that and then you redacted whatever name it was trying to connect to. All we know is that you got a connection timeout.

We cannot help you if you only provide tiny bits of information with no explanation. We don't know what you are doing. We don't know what you have configured in your environment.
Peter_1985 2,736 Reputation points

2022-04-28T10:00:47.14+00:00

Hi,
I checked that it is not OK to telnet on ports 21 and 22 to the IP but I've enabled TCP firewall rules on such ports. Which other change is needed to this?
MotoX80 36,291 Reputation points

2022-04-28T11:39:08.493+00:00
Peter_1985 2,736 Reputation points

2022-04-28T14:28:06.54+00:00

Hi,
Does it mean it is listening on port 21 or not?
MotoX80 36,291 Reputation points

2022-04-29T00:55:47.183+00:00

Yes, process id 22864 is listening on port 21. RDP to the server and run the test-netconnection .It should work. Then from try it from another PC. If it fails to connect, it is probably the firewall that is blocking it. Configure the firewall to log dropped packets and then check the log.

Note that if you have configured IIS/FTP to require an SSL connection then the command line ftp.exe and the Windows Explorer will no longer work. You will need to use an FTPS client like WinSCP or FileZilla.

Answer 3

MotoX80 36,291

Are there multiple people sharing the Jackson1990 account? Do you folks not talk to each other?

We've already been through this problem. Multiple forum users have already explained troubleshooting steps.

https://learn.microsoft.com/en-us/answers/questions/672245/ftp-server-issue.html

Share via

FTP connection issue

3 answers

Your answer