Can't connect to FTPS on port 990FTP over ssh hangs on “Connection established: Waiting for Welcome...

Practical reasons to have both a large police force and bounty hunting network?

Did Amazon pay $0 in taxes last year?

What am I? I am in theaters and computer programs

Six real numbers so that product of any five is the sixth one

Is it possible to make a clamp function shorter than a ternary in JS?

Source for Cremation Specifically Not Jewish

Make me a metasequence

Is divide-by-zero a security vulnerability?

Skis versus snow shoes - when to choose which for travelling the backcountry?

Why do phishing e-mails use faked e-mail addresses instead of the real one?

Rationale to prefer local variables over instance variables?

What type of investment is best suited for a 1-year investment on a down payment?

Every subset equal to original set?

What are all the squawk codes?

Why did John Williams use a march to symbolise Indiana Jones?

Is there a full canon version of Tyrion's jackass/honeycomb joke?

Is there a math equivalent to the conditional ternary operator?

It took me a lot of time to make this, pls like. (YouTube Comments #1)

Can I become debt free or should I file for bankruptcy? How do I manage my debt and finances?

What could trigger powerful quakes on icy world?

lead or lag function to get several values, not just the nth

Get length of the longest sequence of numbers with the same sign

Does "legal poaching" exist?

What is the difference between a forward slip and a side slip?



Can't connect to FTPS on port 990


FTP over ssh hangs on “Connection established: Waiting for Welcome Message”Trying to connect to vsftpd, Failed to retrieve directory listingvsftpd PASV configuration set up, yet still not workingVSFTPD Passive Mode doesn't work Behind NATvsftpd: user folder on different hard diskKubuntu 16.04 can't start vsftpdConnection to FTP Always RefusedCan't connect to vsftpd from external IPHow do I configure vsftpd to use a GoDaddy SSL certificate bundle?16.04 SERVER USING vsftpd using tls getting ECONNREFUSED













1















I am very much new to Linux platform. As I wanted to setup a FTP server using Ubuntu, I installed it and configured the FTP in it. Everything was fine before I enable SSL in vsftpd config file. Apart from default settings, I added the following lines to enable FTP SSL in Ubuntu server.



ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
# Filezilla uses port 21 if you don't set any port
# in Servertype "FTPES - FTP over explicit TLS/SSL"
# Port 990 is the default used for FTPS protocol.
# Uncomment it if you want/have to use port 990.
listen_port=990
pasv_min_port=12000
pasv_max_port=12100


Now if I try to access it with ftps (ftps:// I an getting the below error after entering FTP user name.



No connection could be made because the target machine actively refused it.
Connection failed.


I noticed that it is trying to establish the connection using port 990. I just tried to open port 990 by adding rule in IPtables. The command I used is



sudo iptables -A INPUT -p tcp --sport 990 -j ACCEPT


But no success.



I request somebody's help to troubleshoot why the connection is not establishing and how I can open necessary ports in Ubuntu.










share|improve this question
















bumped to the homepage by Community 6 mins ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.




















    1















    I am very much new to Linux platform. As I wanted to setup a FTP server using Ubuntu, I installed it and configured the FTP in it. Everything was fine before I enable SSL in vsftpd config file. Apart from default settings, I added the following lines to enable FTP SSL in Ubuntu server.



    ssl_enable=YES
    allow_anon_ssl=NO
    force_local_data_ssl=YES
    force_local_logins_ssl=YES
    ssl_tlsv1=YES
    ssl_sslv2=YES
    ssl_sslv3=YES
    # Filezilla uses port 21 if you don't set any port
    # in Servertype "FTPES - FTP over explicit TLS/SSL"
    # Port 990 is the default used for FTPS protocol.
    # Uncomment it if you want/have to use port 990.
    listen_port=990
    pasv_min_port=12000
    pasv_max_port=12100


    Now if I try to access it with ftps (ftps:// I an getting the below error after entering FTP user name.



    No connection could be made because the target machine actively refused it.
    Connection failed.


    I noticed that it is trying to establish the connection using port 990. I just tried to open port 990 by adding rule in IPtables. The command I used is



    sudo iptables -A INPUT -p tcp --sport 990 -j ACCEPT


    But no success.



    I request somebody's help to troubleshoot why the connection is not establishing and how I can open necessary ports in Ubuntu.










    share|improve this question
















    bumped to the homepage by Community 6 mins ago


    This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.


















      1












      1








      1


      1






      I am very much new to Linux platform. As I wanted to setup a FTP server using Ubuntu, I installed it and configured the FTP in it. Everything was fine before I enable SSL in vsftpd config file. Apart from default settings, I added the following lines to enable FTP SSL in Ubuntu server.



      ssl_enable=YES
      allow_anon_ssl=NO
      force_local_data_ssl=YES
      force_local_logins_ssl=YES
      ssl_tlsv1=YES
      ssl_sslv2=YES
      ssl_sslv3=YES
      # Filezilla uses port 21 if you don't set any port
      # in Servertype "FTPES - FTP over explicit TLS/SSL"
      # Port 990 is the default used for FTPS protocol.
      # Uncomment it if you want/have to use port 990.
      listen_port=990
      pasv_min_port=12000
      pasv_max_port=12100


      Now if I try to access it with ftps (ftps:// I an getting the below error after entering FTP user name.



      No connection could be made because the target machine actively refused it.
      Connection failed.


      I noticed that it is trying to establish the connection using port 990. I just tried to open port 990 by adding rule in IPtables. The command I used is



      sudo iptables -A INPUT -p tcp --sport 990 -j ACCEPT


      But no success.



      I request somebody's help to troubleshoot why the connection is not establishing and how I can open necessary ports in Ubuntu.










      share|improve this question
















      I am very much new to Linux platform. As I wanted to setup a FTP server using Ubuntu, I installed it and configured the FTP in it. Everything was fine before I enable SSL in vsftpd config file. Apart from default settings, I added the following lines to enable FTP SSL in Ubuntu server.



      ssl_enable=YES
      allow_anon_ssl=NO
      force_local_data_ssl=YES
      force_local_logins_ssl=YES
      ssl_tlsv1=YES
      ssl_sslv2=YES
      ssl_sslv3=YES
      # Filezilla uses port 21 if you don't set any port
      # in Servertype "FTPES - FTP over explicit TLS/SSL"
      # Port 990 is the default used for FTPS protocol.
      # Uncomment it if you want/have to use port 990.
      listen_port=990
      pasv_min_port=12000
      pasv_max_port=12100


      Now if I try to access it with ftps (ftps:// I an getting the below error after entering FTP user name.



      No connection could be made because the target machine actively refused it.
      Connection failed.


      I noticed that it is trying to establish the connection using port 990. I just tried to open port 990 by adding rule in IPtables. The command I used is



      sudo iptables -A INPUT -p tcp --sport 990 -j ACCEPT


      But no success.



      I request somebody's help to troubleshoot why the connection is not establishing and how I can open necessary ports in Ubuntu.







      vsftpd






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Jun 17 '14 at 7:19









      Rinzwind

      207k28399529




      207k28399529










      asked Jun 17 '14 at 7:17









      user294264user294264

      612




      612





      bumped to the homepage by Community 6 mins ago


      This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.







      bumped to the homepage by Community 6 mins ago


      This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
























          1 Answer
          1






          active

          oldest

          votes


















          0














          I'd do:




          1. completely disable iptables.


          2. tell the service to bind to all the interfaces available, adding this to the config file:



            listen_address=0.0.0.0




          Once done, try to connect and tell us the results.






          share|improve this answer





















          • 1





            When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

            – Benoit
            Jun 17 '14 at 7:59













          • Ok sorry, I understood it was wide known.

            – periket2000
            Jun 17 '14 at 8:11











          • Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

            – user294264
            Jun 17 '14 at 8:58













          • Have you checked if you installed selinux? If so, try "setenforce 0" as root.

            – periket2000
            Jun 17 '14 at 9:05













          • I installed selinux and run setenforce 0 command as root. But no Luck:(

            – user294264
            Jun 17 '14 at 9:36











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "89"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f484422%2fcant-connect-to-ftps-on-port-990%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          0














          I'd do:




          1. completely disable iptables.


          2. tell the service to bind to all the interfaces available, adding this to the config file:



            listen_address=0.0.0.0




          Once done, try to connect and tell us the results.






          share|improve this answer





















          • 1





            When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

            – Benoit
            Jun 17 '14 at 7:59













          • Ok sorry, I understood it was wide known.

            – periket2000
            Jun 17 '14 at 8:11











          • Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

            – user294264
            Jun 17 '14 at 8:58













          • Have you checked if you installed selinux? If so, try "setenforce 0" as root.

            – periket2000
            Jun 17 '14 at 9:05













          • I installed selinux and run setenforce 0 command as root. But no Luck:(

            – user294264
            Jun 17 '14 at 9:36
















          0














          I'd do:




          1. completely disable iptables.


          2. tell the service to bind to all the interfaces available, adding this to the config file:



            listen_address=0.0.0.0




          Once done, try to connect and tell us the results.






          share|improve this answer





















          • 1





            When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

            – Benoit
            Jun 17 '14 at 7:59













          • Ok sorry, I understood it was wide known.

            – periket2000
            Jun 17 '14 at 8:11











          • Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

            – user294264
            Jun 17 '14 at 8:58













          • Have you checked if you installed selinux? If so, try "setenforce 0" as root.

            – periket2000
            Jun 17 '14 at 9:05













          • I installed selinux and run setenforce 0 command as root. But no Luck:(

            – user294264
            Jun 17 '14 at 9:36














          0












          0








          0







          I'd do:




          1. completely disable iptables.


          2. tell the service to bind to all the interfaces available, adding this to the config file:



            listen_address=0.0.0.0




          Once done, try to connect and tell us the results.






          share|improve this answer















          I'd do:




          1. completely disable iptables.


          2. tell the service to bind to all the interfaces available, adding this to the config file:



            listen_address=0.0.0.0




          Once done, try to connect and tell us the results.







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Jun 17 '14 at 7:56









          Benoit

          6,43711832




          6,43711832










          answered Jun 17 '14 at 7:33









          periket2000periket2000

          1012




          1012








          • 1





            When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

            – Benoit
            Jun 17 '14 at 7:59













          • Ok sorry, I understood it was wide known.

            – periket2000
            Jun 17 '14 at 8:11











          • Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

            – user294264
            Jun 17 '14 at 8:58













          • Have you checked if you installed selinux? If so, try "setenforce 0" as root.

            – periket2000
            Jun 17 '14 at 9:05













          • I installed selinux and run setenforce 0 command as root. But no Luck:(

            – user294264
            Jun 17 '14 at 9:36














          • 1





            When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

            – Benoit
            Jun 17 '14 at 7:59













          • Ok sorry, I understood it was wide known.

            – periket2000
            Jun 17 '14 at 8:11











          • Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

            – user294264
            Jun 17 '14 at 8:58













          • Have you checked if you installed selinux? If so, try "setenforce 0" as root.

            – periket2000
            Jun 17 '14 at 9:05













          • I installed selinux and run setenforce 0 command as root. But no Luck:(

            – user294264
            Jun 17 '14 at 9:36








          1




          1





          When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

          – Benoit
          Jun 17 '14 at 7:59







          When you write an answer, describe the command to be run, not only describing it. Details how we can completely disable iptable (service iptables stop, update-rc.d iptables remove, ...)

          – Benoit
          Jun 17 '14 at 7:59















          Ok sorry, I understood it was wide known.

          – periket2000
          Jun 17 '14 at 8:11





          Ok sorry, I understood it was wide known.

          – periket2000
          Jun 17 '14 at 8:11













          Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

          – user294264
          Jun 17 '14 at 8:58







          Yes I tried this. But it didn't work. Still I am unable to login. Thanks.

          – user294264
          Jun 17 '14 at 8:58















          Have you checked if you installed selinux? If so, try "setenforce 0" as root.

          – periket2000
          Jun 17 '14 at 9:05







          Have you checked if you installed selinux? If so, try "setenforce 0" as root.

          – periket2000
          Jun 17 '14 at 9:05















          I installed selinux and run setenforce 0 command as root. But no Luck:(

          – user294264
          Jun 17 '14 at 9:36





          I installed selinux and run setenforce 0 command as root. But no Luck:(

          – user294264
          Jun 17 '14 at 9:36


















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Ask Ubuntu!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f484422%2fcant-connect-to-ftps-on-port-990%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Why do type traits not work with types in namespace scope?What are POD types in C++?Why can templates only be...

          Will tsunami waves travel forever if there was no land?Why do tsunami waves begin with the water flowing away...

          Should I use Docker or LXD?How to cache (more) data on SSD/RAM to avoid spin up?Unable to get Windows File...