Hello,
A client of mine is encountering this connections issue and I am not able to replicate. I use the same version of WinSCP and am able to logon to the ftp server using the same credentials they are using.
WinSCP info
Remote system = UNIX emulated by FileZilla
File transfer protocol = FTP
Cryptographic protocol = TLS/SSL Implicit encryption, TLSv1.2
Encryption algorithm = TLSv1/SSLv3: ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA, ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
Compression = No
------------------------------------------------------------
Certificate fingerprint
*removed*
------------------------------------------------------------
Can change permissions = Yes
Can change owner/group = No
Can execute arbitrary command = Protocol commands only
Can create symbolic/hard link = No/No
Can lookup user groups = No
Can duplicate remote files = No
Can check available space = No
Can calculate file checksum = No
Native text (ASCII) mode transfers = No
------------------------------------------------------------
Additional information
The server supports these FTP additional features:
MDTM
REST STREAM
SIZE
MLST type*;size*;modify*;
MLSD
AUTH SSL
AUTH TLS
PROT
PBSZ
UTF8
CLNT
MFMT
EPSV
EPRT
The following is the WinSCP log
. 2017-02-28 12:30:21.620 --------------------------------------------------------------------------
. 2017-02-28 12:30:21.620 WinSCP Version 5.9.4 (Build 7333) (OS 6.3.9600 - Windows Server 2012 R2 Standard)
. 2017-02-28 12:30:21.620 Configuration: HKCU\Software\Martin Prikryl\WinSCP 2\
. 2017-02-28 12:30:21.620 Log level: Debug 2
. 2017-02-28 12:30:21.620 Local account: SBPROXY\Kate
. 2017-02-28 12:30:21.620 Working directory: C:\Program Files (x86)\WinSCP
. 2017-02-28 12:30:21.620 Process ID: 256
. 2017-02-28 12:30:21.620 Command-line: "C:\Program Files (x86)\WinSCP\WinSCP.exe"
. 2017-02-28 12:30:21.620 Time zone: Current: GMT-5, Standard: GMT-5 (Eastern Standard Time), DST: GMT-4 (Eastern Daylight Time), DST Start: 3/12/2017, DST End: 11/5/2017
. 2017-02-28 12:30:21.620 Login time: Tuesday, February 28, 2017 12:30:21 PM
. 2017-02-28 12:30:21.620 --------------------------------------------------------------------------
. 2017-02-28 12:30:21.620 Session name: DUMMYDUMMY (Site)
. 2017-02-28 12:30:21.620 Host name: ftp.DUMMYDUMMY.com (Port: 990)
. 2017-02-28 12:30:21.620 User name: DUMMY01 (Password: Yes, Key file: No, Passphrase: No)
. 2017-02-28 12:30:21.620 Transfer Protocol: FTP
. 2017-02-28 12:30:21.620 Ping type: Off, Ping interval: 30 sec; Timeout: 15 sec
. 2017-02-28 12:30:21.620 Disable Nagle: No
. 2017-02-28 12:30:21.620 Proxy: None
. 2017-02-28 12:30:21.620 Send buffer: 262144
. 2017-02-28 12:30:21.620 UTF: Auto
. 2017-02-28 12:30:21.620 FTPS: Implicit TLS/SSL [Client certificate: No]
. 2017-02-28 12:30:21.620 FTP: Passive: Yes [Force IP: Auto]; MLSD: Auto [List all: Auto]; HOST: Auto
. 2017-02-28 12:30:21.620 Session reuse: Yes
. 2017-02-28 12:30:21.620 TLS/SSL versions: TLSv1.0-TLSv1.2
. 2017-02-28 12:30:21.620 Local directory: C:\DUMMYDUMMY\FTP, Remote directory: /, Update: Yes, Cache: Yes
. 2017-02-28 12:30:21.620 Cache directory changes: Yes, Permanent: Yes
. 2017-02-28 12:30:21.620 Recycle bin: Delete to: No, Overwritten to: No, Bin path:
. 2017-02-28 12:30:21.620 Timezone offset: 0h 0m
. 2017-02-28 12:30:21.620 --------------------------------------------------------------------------
. 2017-02-28 12:30:22.042 Session upkeep
. 2017-02-28 12:30:22.307 Connecting to ftp.DUMMYDUMMY.com:990 ...
. 2017-02-28 12:30:22.307 TLS layer changed state from unconnected to connecting
. 2017-02-28 12:30:22.307 TLS layer changed state from connecting to connected
. 2017-02-28 12:30:22.307 Connected with ftp.DUMMYDUMMY.com:990, negotiating TLS connection...
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 read server hello A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 read server certificate A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 read server key exchange A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 read server done A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 write client key exchange A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 write change cipher spec A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 write finished A
. 2017-02-28 12:30:22.307 TLS connect: SSLv3 flush data
. 2017-02-28 12:30:22.354 TLS connect: SSLv3 read server session ticket A
. 2017-02-28 12:30:22.354 TLS connect: SSLv3 read finished A
. 2017-02-28 12:30:22.354 Verifying certificate for "DUMMYDUMMY, LLC" with fingerprint *removed* and 18 failures
. 2017-02-28 12:30:22.354 Certificate common name "ftp.DUMMYDUMMY.com" matches hostname
. 2017-02-28 12:30:22.354 Certificate for "DUMMYDUMMY, LLC" matches cached fingerprint and failures
. 2017-02-28 12:30:22.354 Using TLSv1.2, cipher TLSv1/SSLv3: ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA, ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
. 2017-02-28 12:30:22.370 TLS connection established. Waiting for welcome message...
< 2017-02-28 12:30:22.370 220 Hello...now where to begin
> 2017-02-28 12:30:22.370 USER DUMMY01
< 2017-02-28 12:30:22.417 331 Password required for DUMMY01
> 2017-02-28 12:30:22.417 PASS **************
< 2017-02-28 12:30:22.495 230 Logged on
> 2017-02-28 12:30:22.495 SYST
< 2017-02-28 12:30:22.573 215 UNIX emulated by FileZilla
> 2017-02-28 12:30:22.573 FEAT
< 2017-02-28 12:30:22.636 211-Features:
< 2017-02-28 12:30:22.636 MDTM
< 2017-02-28 12:30:22.636 REST STREAM
< 2017-02-28 12:30:22.636 SIZE
< 2017-02-28 12:30:22.636 MLST type*;size*;modify*;
< 2017-02-28 12:30:22.636 MLSD
< 2017-02-28 12:30:22.636 AUTH SSL
< 2017-02-28 12:30:22.636 AUTH TLS
< 2017-02-28 12:30:22.636 PROT
< 2017-02-28 12:30:22.636 PBSZ
< 2017-02-28 12:30:22.636 UTF8
< 2017-02-28 12:30:22.636 CLNT
< 2017-02-28 12:30:22.636 MFMT
< 2017-02-28 12:30:22.636 EPSV
< 2017-02-28 12:30:22.636 EPRT
< 2017-02-28 12:30:22.636 211 End
> 2017-02-28 12:30:22.636 CLNT WinSCP-release-5.9.4
< 2017-02-28 12:30:22.714 200 Don't care
> 2017-02-28 12:30:22.714 OPTS UTF8 ON
< 2017-02-28 12:30:22.792 202 UTF8 mode is always enabled. No need to send this command.
> 2017-02-28 12:30:22.792 PBSZ 0
< 2017-02-28 12:30:22.854 200 PBSZ=0
> 2017-02-28 12:30:22.854 PROT P
< 2017-02-28 12:30:22.933 200 Protection level set to P
. 2017-02-28 12:30:22.933 Session upkeep
. 2017-02-28 12:30:22.995 Connected
. 2017-02-28 12:30:22.995 Got reply 1 to the command 1
. 2017-02-28 12:30:22.995 --------------------------------------------------------------------------
. 2017-02-28 12:30:22.995 Using FTP protocol.
. 2017-02-28 12:30:22.995 Doing startup conversation with host.
> 2017-02-28 12:30:23.058 PWD
< 2017-02-28 12:30:23.136 257 "/" is current directory.
. 2017-02-28 12:30:23.136 Got reply 1 to the command 16
. 2017-02-28 12:30:23.136 Changing directory to "/".
> 2017-02-28 12:30:23.136 CWD /
< 2017-02-28 12:30:23.198 250 CWD successful. "/" is current directory.
. 2017-02-28 12:30:23.198 Got reply 1 to the command 16
. 2017-02-28 12:30:23.198 Getting current directory name.
> 2017-02-28 12:30:23.198 PWD
< 2017-02-28 12:30:23.276 257 "/" is current directory.
. 2017-02-28 12:30:23.276 Got reply 1 to the command 16
. 2017-02-28 12:30:23.433 Retrieving directory listing...
> 2017-02-28 12:30:23.433 TYPE A
< 2017-02-28 12:30:23.495 200 Type set to A
> 2017-02-28 12:30:23.495 PASV
< 2017-02-28 12:30:23.573 227 Entering Passive Mode (64,69,35,93,19,152)
> 2017-02-28 12:30:23.573 MLSD
. 2017-02-28 12:30:23.573 Connecting to 64.69.35.93:5016 ...
. 2017-02-28 12:30:23.636 Data connection opened
. 2017-02-28 12:30:23.636 Trying reuse main TLS session ID
. 2017-02-28 12:30:23.636 TLS layer changed state from none to connected
. 2017-02-28 12:30:23.636 TLS layer changed state from connected to aborted
. 2017-02-28 12:30:23.636 Data connection closed
. 2017-02-28 12:30:23.636 <Empty directory listing>
< 2017-02-28 12:30:23.714 150 Opening data channel for directory listing of "/"
< 2017-02-28 12:30:23.714 426 Connection closed; aborted transfer of "/"
. 2017-02-28 12:30:23.714 Could not retrieve directory listing
. 2017-02-28 12:30:23.714 Got reply 4 to the command 2
. 2017-02-28 12:30:23.714 Session upkeep
* 2017-02-28 12:30:23.808 (ECommand) Error listing directory '/'.
* 2017-02-28 12:30:23.808 Could not retrieve directory listing
* 2017-02-28 12:30:23.808 Connection closed; aborted transfer of "/"
. 2017-02-28 12:30:24.761 Startup conversation with host finished.
. 2017-02-28 12:30:24.761 Session upkeep
. 2017-02-28 12:30:24.917 Session upkeep
. 2017-02-28 12:30:25.401 Session upkeep
. 2017-02-28 12:30:25.901 Session upkeep
. 2017-02-28 12:30:26.401 Session upkeep
. 2017-02-28 12:30:26.901 Session upkeep
. 2017-02-28 12:30:27.401 Session upkeep
. 2017-02-28 12:30:27.901 Session upkeep
. 2017-02-28 12:30:28.401 Session upkeep
. 2017-02-28 12:30:28.901 Session upkeep
. 2017-02-28 12:30:29.401 Session upkeep
. 2017-02-28 12:30:29.901 Session upkeep
. 2017-02-28 12:30:30.401 Session upkeep
. 2017-02-28 12:30:30.901 Session upkeep
. 2017-02-28 12:30:31.401 Session upkeep
. 2017-02-28 12:30:31.901 Session upkeep
. 2017-02-28 12:30:32.401 Session upkeep
. 2017-02-28 12:30:32.901 Session upkeep
. 2017-02-28 12:30:33.401 Session upkeep
. 2017-02-28 12:30:33.901 Session upkeep
. 2017-02-28 12:30:34.401 Session upkeep
. 2017-02-28 12:30:34.901 Session upkeep
. 2017-02-28 12:30:35.401 Session upkeep
. 2017-02-28 12:30:35.901 Session upkeep
. 2017-02-28 12:30:36.401 Session upkeep
. 2017-02-28 12:30:36.901 Session upkeep
. 2017-02-28 12:30:37.401 Session upkeep
. 2017-02-28 12:30:37.901 Session upkeep
. 2017-02-28 12:30:38.401 Session upkeep
. 2017-02-28 12:30:38.901 Session upkeep
. 2017-02-28 12:30:39.401 Session upkeep
. 2017-02-28 12:30:39.901 Session upkeep
. 2017-02-28 12:30:40.401 Session upkeep
. 2017-02-28 12:30:40.901 Session upkeep
. 2017-02-28 12:30:41.401 Session upkeep
. 2017-02-28 12:30:41.901 Session upkeep
. 2017-02-28 12:30:42.401 Session upkeep
. 2017-02-28 12:30:42.901 Session upkeep
The following is server logs of the unsuccessful connection
(001118) 2/28/2017 9:29:54 AM - (not logged in) (xxx.xxx.xxx.17)> Connected on port 990, sending welcome message...
(001118) 2/28/2017 9:29:54 AM - (not logged in) (xxx.xxx.xxx.17)> SSL connection established
(001118) 2/28/2017 9:29:54 AM - (not logged in) (xxx.xxx.xxx.17)> USER ccopl
(001118) 2/28/2017 9:29:54 AM - (not logged in) (xxx.xxx.xxx.17)> 331 Password required for ccopl
(001118) 2/28/2017 9:29:54 AM - (not logged in) (xxx.xxx.xxx.17)> PASS **************
(001118) 2/28/2017 9:29:54 AM - ccopl (xxx.xxx.xxx.17)> 230 Logged on
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> SYST
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 215 UNIX emulated by FileZilla
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> FEAT
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 211-Features:
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> MDTM
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> REST STREAM
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> SIZE
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> MLST type*;size*;modify*;
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> MLSD
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> AUTH SSL
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> AUTH TLS
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PROT
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PBSZ
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> UTF8
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> CLNT
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> MFMT
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> EPSV
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> EPRT
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 211 End
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> CLNT WinSCP-release-5.9.4
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 200 Don't care
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> OPTS UTF8 ON
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 202 UTF8 mode is always enabled. No need to send this command.
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PBSZ 0
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 200 PBSZ=0
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PROT P
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 200 Protection level set to P
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PWD
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 257 "/" is current directory.
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> CWD /
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 250 CWD successful. "/" is current directory.
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> PWD
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 257 "/" is current directory.
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> TYPE A
(001118) 2/28/2017 9:29:55 AM - ccopl (xxx.xxx.xxx.17)> 200 Type set to A
(001118) 2/28/2017 9:29:56 AM - ccopl (xxx.xxx.xxx.17)> PASV
(001118) 2/28/2017 9:29:56 AM - ccopl (xxx.xxx.xxx.17)> 227 Entering Passive Mode (64,69,35,93,19,152)
(001118) 2/28/2017 9:29:56 AM - ccopl (xxx.xxx.xxx.17)> MLSD
(001118) 2/28/2017 9:29:56 AM - ccopl (xxx.xxx.xxx.17)> 150 Opening data channel for directory listing of "/"
(001118) 2/28/2017 9:29:56 AM - ccopl (xxx.xxx.xxx.17)> 426 Connection closed; aborted transfer of "/"
(001118) 2/28/2017 9:33:56 AM - ccopl (xxx.xxx.xxx.17)> 421 Connection timed out.
(001118) 2/28/2017 9:33:56 AM - ccopl (xxx.xxx.xxx.17)> disconnected.
The following is my attempt to connect from my home office using WinSCP and the same credentials.
(001192)2/28/2017 15:06:02 PM - (not logged in) (xxx.xxx.xxx.241)> Connected on port 990, sending welcome message...
(001192)2/28/2017 15:06:02 PM - (not logged in) (xxx.xxx.xxx.241)> SSL connection established
(001192)2/28/2017 15:06:02 PM - (not logged in) (xxx.xxx.xxx.241)> USER ccopl
(001192)2/28/2017 15:06:02 PM - (not logged in) (xxx.xxx.xxx.241)> 331 Password required for ccopl
(001192)2/28/2017 15:06:02 PM - (not logged in) (xxx.xxx.xxx.241)> PASS **************
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 230 Logged on
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> SYST
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 215 UNIX emulated by FileZilla
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> FEAT
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 211-Features:
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> MDTM
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> REST STREAM
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> SIZE
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> MLST type*;size*;modify*;
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> MLSD
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> AUTH SSL
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> AUTH TLS
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> PROT
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> PBSZ
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> UTF8
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> CLNT
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> MFMT
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> EPSV
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> EPRT
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 211 End
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> CLNT WinSCP-release-5.9.4
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 200 Don't care
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> OPTS UTF8 ON
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 202 UTF8 mode is always enabled. No need to send this command.
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> PBSZ 0
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 200 PBSZ=0
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> PROT P
(001192)2/28/2017 15:06:02 PM - ccopl (xxx.xxx.xxx.241)> 200 Protection level set to P
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> PWD
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 257 "/" is current directory.
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> CWD /
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 250 CWD successful. "/" is current directory.
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> PWD
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 257 "/" is current directory.
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> TYPE A
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 200 Type set to A
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> PASV
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 227 Entering Passive Mode (64,69,35,93,19,175)
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> MLSD
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 150 Opening data channel for directory listing of "/"
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> SSL connection for data connection established
(001192)2/28/2017 15:06:03 PM - ccopl (xxx.xxx.xxx.241)> 226 Successfully transferred "/"
Many thanks for your time...