FTP connection issue

Peter_1985 2,526

Hi,
I've enabled traffic of TCP and UDP protocols on port 22 of the relevant IP, the server is having the proper certificate working fine with the Email server. But now I cannot connect to server SFTP even if I've set up FTP with SSL on the server.

Bruce Zhang-MSFT 3,736 Reputation points

2022-04-18T02:05:17.307+00:00

Hi @Peter_1985 ,

I think first of all you should use FTP to connect to the server, so that you can determine whether the client can connect to the server, so consider that maybe the SSL verification fails and the SFTP cannot connect.

Another thing is how you connect to server SFTP and is there any error message when you connect failed? Check your FTP site log to see if FTP site receive the client request. If the site has received, please check event viewer to get more detailed error message.

3 answers

MotoX80 32,066 Reputation points

2022-04-17T15:43:18.783+00:00

Please be specific. You are referencing 2 different protocols.

FTP listens on port 21. Typically, FTP is installed as part of IIS and is hosted by the "Microsoft FTP Service".
FTPS is FTP over SSL on port 21 and is also hosted by IIS.
SFTP listens on port 22. It is typically implemented as part of the OpenSSH feature of Windows.

https://ourcodeworld.com/articles/read/181/what-is-ftps-ftp-sftp-and-what-is-the-difference-between-them

You have to do basic troubleshooting yourself. Forum users have no way of knowing what you have configured on your server.

Use Computer Management and verify that the service is running.

Use the netstat tool to verify that your system has a process listening on the correct port.

https://www.configserverfirewall.com/windows-10/netstat-command-to-check-open-ports-in-windows/

On a different machine use Powershell's Test-NetConnection cmdlet to test connectivity to the port.

https://support.solarwinds.com/SuccessCenter/s/article/Use-PowerShell-to-test-that-a-port-is-open-on-a-server?language=en_US
Please sign in to rate this answer.
Peter_1985 2,526 Reputation points

2022-04-18T03:35:41.447+00:00

Hi all,
I used Test-NetConnection on Powershell to test it on port 21 and got that TcpTestSucceeded is false. How to identify issue of the certificate?

MotoX80 32,066 Reputation points

2022-04-18T12:25:39.71+00:00

What's the issue? You have not shared any error message or screen snapshot or said what program you are using.

We can't help you if you do not provide details.
Sign in to comment
Peter_1985 2,526 Reputation points

2022-04-18T12:46:47.263+00:00

I cannot connect to that host name and want to know how to verify if the certificate is correct or not.
Please sign in to rate this answer.
MotoX80 32,066 Reputation points

2022-04-18T12:58:20.347+00:00

how to verify if the certificate is correct

On the server, run the IIS manager and view the certificate.

Peter_1985 2,526 Reputation points

2022-04-27T07:17:56.767+00:00

Hi,
What other check should be done on this?

MotoX80 32,066 Reputation points

2022-04-27T16:17:14.597+00:00

We do not know what your problem is. Are you having a connection problem or a certificate problem?

We don't know if you are running SFTP/OpenSSH or FTPS/IIS. In your initial question you said that you enabled traffic on port 22 but then replied that you used Test-Netconnection on port 21.

You posted an image of a message box but you did not explain what program generated that and then you redacted whatever name it was trying to connect to. All we know is that you got a connection timeout.

We cannot help you if you only provide tiny bits of information with no explanation. We don't know what you are doing. We don't know what you have configured in your environment.

Peter_1985 2,526 Reputation points

2022-04-28T10:00:47.14+00:00

Hi,
I checked that it is not OK to telnet on ports 21 and 22 to the IP but I've enabled TCP firewall rules on such ports. Which other change is needed to this?

MotoX80 32,066 Reputation points

2022-04-28T11:39:08.493+00:00

Peter_1985 2,526 Reputation points

2022-04-28T14:28:06.54+00:00

Hi,
Does it mean it is listening on port 21 or not?

MotoX80 32,066 Reputation points

2022-04-29T00:55:47.183+00:00

Yes, process id 22864 is listening on port 21. RDP to the server and run the test-netconnection .It should work. Then from try it from another PC. If it fails to connect, it is probably the firewall that is blocking it. Configure the firewall to log dropped packets and then check the log.

Note that if you have configured IIS/FTP to require an SSL connection then the command line ftp.exe and the Windows Explorer will no longer work. You will need to use an FTPS client like WinSCP or FileZilla.
Sign in to comment
MotoX80 32,066 Reputation points

2022-04-29T13:53:02.987+00:00

Are there multiple people sharing the Jackson1990 account? Do you folks not talk to each other?

We've already been through this problem. Multiple forum users have already explained troubleshooting steps.

https://learn.microsoft.com/en-us/answers/questions/672245/ftp-server-issue.html
Please sign in to rate this answer.

0 comments No comments
Sign in to comment