question

Jackson1990-7147 avatar image
0 Votes"
Jackson1990-7147 asked MotoX80 answered

FTP connection issue

Hi,
I've enabled traffic of TCP and UDP protocols on port 22 of the relevant IP, the server is having the proper certificate working fine with the Email server. But now I cannot connect to server SFTP even if I've set up FTP with SSL on the server.

windows-serverwindows-server-iiswindows-server-security
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @Jackson1990-7147 ,

I think first of all you should use FTP to connect to the server, so that you can determine whether the client can connect to the server, so consider that maybe the SSL verification fails and the SFTP cannot connect.

Another thing is how you connect to server SFTP and is there any error message when you connect failed? Check your FTP site log to see if FTP site receive the client request. If the site has received, please check event viewer to get more detailed error message.

0 Votes 0 ·
MotoX80 avatar image
0 Votes"
MotoX80 answered MotoX80 commented

Please be specific. You are referencing 2 different protocols.

FTP listens on port 21. Typically, FTP is installed as part of IIS and is hosted by the "Microsoft FTP Service".
FTPS is FTP over SSL on port 21 and is also hosted by IIS.
SFTP listens on port 22. It is typically implemented as part of the OpenSSH feature of Windows.

https://ourcodeworld.com/articles/read/181/what-is-ftps-ftp-sftp-and-what-is-the-difference-between-them

You have to do basic troubleshooting yourself. Forum users have no way of knowing what you have configured on your server.

Use Computer Management and verify that the service is running.

Use the netstat tool to verify that your system has a process listening on the correct port.

https://www.configserverfirewall.com/windows-10/netstat-command-to-check-open-ports-in-windows/

On a different machine use Powershell's Test-NetConnection cmdlet to test connectivity to the port.

https://support.solarwinds.com/SuccessCenter/s/article/Use-PowerShell-to-test-that-a-port-is-open-on-a-server?language=en_US

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi all,
I used Test-NetConnection on Powershell to test it on port 21 and got that TcpTestSucceeded is false. How to identify issue of the certificate?

0 Votes 0 ·
MotoX80 avatar image MotoX80 Jackson1990-7147 ·

What's the issue? You have not shared any error message or screen snapshot or said what program you are using.

We can't help you if you do not provide details.

0 Votes 0 ·
Jackson1990-7147 avatar image
0 Votes"
Jackson1990-7147 answered MotoX80 commented

I cannot connect to that host name and want to know how to verify if the certificate is correct or not.
193885-image.png



image.png (6.4 KiB)
· 7
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

how to verify if the certificate is correct

On the server, run the IIS manager and view the certificate.

193819-capture.png





0 Votes 0 ·
capture.png (40.6 KiB)

Hi,
What other check should be done on this?

0 Votes 0 ·
MotoX80 avatar image MotoX80 Jackson1990-7147 ·

We do not know what your problem is. Are you having a connection problem or a certificate problem?

We don't know if you are running SFTP/OpenSSH or FTPS/IIS. In your initial question you said that you enabled traffic on port 22 but then replied that you used Test-Netconnection on port 21.

You posted an image of a message box but you did not explain what program generated that and then you redacted whatever name it was trying to connect to. All we know is that you got a connection timeout.

We cannot help you if you only provide tiny bits of information with no explanation. We don't know what you are doing. We don't know what you have configured in your environment.

197057-capture.png






0 Votes 0 ·
capture.png (41.3 KiB)

Hi,
I checked that it is not OK to telnet on ports 21 and 22 to the IP but I've enabled TCP firewall rules on such ports. Which other change is needed to this?

0 Votes 0 ·
Show more comments
MotoX80 avatar image
0 Votes"
MotoX80 answered MotoX80 edited

Are there multiple people sharing the Jackson1990 account? Do you folks not talk to each other?

We've already been through this problem. Multiple forum users have already explained troubleshooting steps.

https://docs.microsoft.com/en-us/answers/questions/672245/ftp-server-issue.html


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.