WinSCP - connection failed to FTP on IIS Windows Server 2012R2

Hello there,

I'm new to this forum looking for help with my connection issues to my FTP server.

1. installed the FTP server Role onto my 2012R2 box, followed the guide provided on the WinSCP site.
2. installed the client for Windows on my computer
3. added Firewall policy (Watch Guard T30) to allow FTP traffic from my home office to server location
a) added Static NAT (Public IP to internal Server IP)
4. created site within WinSCP client
a) active mode first
5. When trying to connect from home office I am getting
Connecting to 184.xx.xx.xx ...
. 2017-01-23 10:30:42.313 Timeout detected. (control connection)
. 2017-01-23 10:30:42.313 Connection failed.
. 2017-01-23 10:30:42.313 Got reply 1004 to the command 1
* 2017-01-23 10:30:42.340 (EFatal) Connection failed.
* 2017-01-23 10:30:42.340 Timeout detected. (control connection)
a) passive mode second

I was trying different configurations within IIS, changed Firewall Support, Ports 0-0, changed Firewall policies accordingly.
Disabled Symantec Endpoint Protection temporary on server
When looking at the firewall traffic log, my connection to the server is allowed.

No luck!

When running the WinScp client on a computer within the office network (server location)- it connects right away!

Please help!

Thank you,
Manfred

Here an update,

I was working with Watch Guard Support. We were trying to connect to the server via a VPN tunnel as RDP is working fine to that server.

We made some minor changes to the setup and is now able to see the connections coming on the trusted interface.

What we are now seeing is that the server is not responding to any of these requests.

1 2017/024 18:26:51.357424 192.168.105.2 192.168.5.7 TCP 62 59948→21 [SYN] Seq=0 Win=8192 Len=0 MSS=1371 SACK_PERM=1
2 2017/024 18:26:51.655524 96.xx.xxx.xxx 192.168.5.7 TCP 66 59951→21 [SYN] Seq=0 Win=43690 Len=0 MSS=1400 SACK_PERM=1 WS=128
3 2017/024 18:26:52.653871 96.xx.xxx.xxx 192.168.5.7 TCP 66 [TCP Retransmission] 59951→21 [SYN] Seq=0 Win=43690 Len=0 MSS=1400 SACK_PERM=1 WS=128
4 2017/024 18:26:54.657876 96.xx.xxx.xxx 192.168.5.7 TCP 66 [TCP Retransmission] 59951→21 [SYN] Seq=0 Win=43690 Len=0 MSS=1400 SACK_PERM=1 WS=128


Still not working! Any other ideas?

Thanks,

We can hardly help you here with network configuration.

Just a small hint: You cannot not even establish a primary control connection now. So there's no point wasting time with active/passive mode and data connection port ranges. That will possibly become a real problem only later, once you overcome your immediate problem with the control connection.

I think you have to check which ports you have passed to you server throw firewall from internet to you internal network.

FTP uses data ports in PASV mode which you tell him as well as 21.
In PORT mode it uses data port 20 as well as 21.
https://en.wikipedia.org/wiki/File_Transfer_Protocol
So it depends which mode you have.

Makc666 wrote:

FTP uses data ports in PASV mode which you tell him as well as 21.
In PORT mode it uses data port 20 as well as 21.
https://en.wikipedia.org/wiki/File_Transfer_Protocol
So it depends which mode you have.

As wrote above, the OP cannot even connect to port 21. Data connection ports are irrelevant at this stage.