Guest Golard Posted October 20, 2008 Posted October 20, 2008 Hi, Since few years, I'm developping a professionnal software. I want to make it work on Vista SP1, with Windows Defender active. WITHOUT windows defender, it's OK. With Windows Defender active, I've got a FTP error (error n°10060: The current connection has timedout). With Windows Defender active, FTP commands are working in a command console I've add an inbound and an outbound rule in windows defender to open port 20 & 21 but nothing change... My application is using a COM object to do FTP. Please can you help me to make my application work ??? Quote
Guest Golard Posted October 20, 2008 Posted October 20, 2008 "Golard" wrote: <span style="color:blue"> > Hi, > Since few years, I'm developping a professionnal software. > I want to make it work on Vista SP1, with Windows Defender active. > > WITHOUT windows defender, it's OK. > With Windows Defender active, I've got a FTP error (error n°10060: The > current connection has timedout). > With Windows Defender active, FTP commands are working in a command > console > > I've add an inbound and an outbound rule in windows defender to open port 20 > & 21 but nothing change... > My application is using a COM object to do FTP. > > Please can you help me to make my application work ??? > > > </span> French traduction: Pour maximiser mes chances de réponses, voici la traduction française de mon message: Salut, Je développe un programme "professionnel" depuis plusieures années. Je désire aujourd'hui le faire fonctionner sous Vista SP1, avec le pare-feu Windows Defender actif. SANS windows defender, tout fonctionne. Avec windows defender actif, j'ai une erreur FTP (error n°10060: The current connection has timedout). Toujours avec windows defender actif, les commandes FTP fonctionnent en utilisant l'invite de commandes MSDOS. J'ai essayé d'ajouter des règles entrantes et sortantes dans windows defender pour ouvrir les ports 20 & 21, mais ça ne change rien... Mon application utilise un composant tiers de type "COM object" pour le FTP. SVP pouvez-vous m'aider àparamétrer windows defender ??? Quote
Guest Ollis Posted October 21, 2008 Posted October 21, 2008 "Golard" wrote: <span style="color:blue"> > Hi, > Since few years, I'm developping a professionnal software. > I want to make it work on Vista SP1, with Windows Defender active. > > WITHOUT windows defender, it's OK. > With Windows Defender active, I've got a FTP error (error n°10060: The > current connection has timedout). > With Windows Defender active, FTP commands are working in a command > console > > I've add an inbound and an outbound rule in windows defender to open port 20 > & 21 but nothing change... > My application is using a COM object to do FTP. > > Please can you help me to make my application work ??? > > > </span> Are you sure you're talking about the right program? Are you talking about the Windows Firewall and not Windows Defender? I can't see where Windows Defender would be concerned with FTP ports. Quote
Guest Golard Posted October 21, 2008 Posted October 21, 2008 "Ollis" <No@No.com> a écrit dans le message de news: 299CEA9C-47D9-4A1C-A86A-C87997A79DAD@microsoft.com...<span style="color:blue"> > > > "Golard" wrote: ><span style="color:green"> > > Hi, > > Since few years, I'm developping a professionnal software. > > I want to make it work on Vista SP1, with Windows Defender active. > > > > WITHOUT windows defender, it's OK. > > With Windows Defender active, I've got a FTP error (error n°10060: The > > current connection has timedout). > > With Windows Defender active, FTP commands are working in a command > > console > > > > I've add an inbound and an outbound rule in windows defender to open</span></span> port 20<span style="color:blue"><span style="color:green"> > > & 21 but nothing change... > > My application is using a COM object to do FTP. > > > > Please can you help me to make my application work ??? > > > > > ></span> > > Are you sure you're talking about the right program? Are you talking about > the Windows Firewall and not Windows Defender? > > I can't see where Windows Defender would be concerned with FTP ports. ></span> "Windows Defender" is the name of the new Windows Vista firewall. Of course Windows Defender control TCP and UDP ports and many other things. Does anybody know HOW to setup windows defender concerning my problem above ? Quote
Guest Ollis Posted October 21, 2008 Posted October 21, 2008 "Golard" wrote: <span style="color:blue"> > > "Ollis" <No@No.com> a écrit dans le message de news: > 299CEA9C-47D9-4A1C-A86A-C87997A79DAD@microsoft.com...<span style="color:green"> > > > > > > "Golard" wrote: > ><span style="color:darkred"> > > > Hi, > > > Since few years, I'm developping a professionnal software. > > > I want to make it work on Vista SP1, with Windows Defender active. > > > > > > WITHOUT windows defender, it's OK. > > > With Windows Defender active, I've got a FTP error (error n°10060: The > > > current connection has timedout). > > > With Windows Defender active, FTP commands are working in a command > > > console > > > > > > I've add an inbound and an outbound rule in windows defender to open</span></span> > port 20<span style="color:green"><span style="color:darkred"> > > > & 21 but nothing change... > > > My application is using a COM object to do FTP. > > > > > > Please can you help me to make my application work ??? > > > > > > > > ></span> > > > > Are you sure you're talking about the right program? Are you talking about > > the Windows Firewall and not Windows Defender? > > > > I can't see where Windows Defender would be concerned with FTP ports. > ></span> > > "Windows Defender" is the name of the new Windows Vista firewall. > Of course Windows Defender control TCP and UDP ports and many other things. > Does anybody know HOW to setup windows defender concerning my problem above > ?</span> http://en.wikipedia.org/wiki/Windows_Defender http://www.microsoft.com/windows/windows-v...s/firewall.aspx http://whitepapers.silicon.com/0,39024759,60265463p,00.htm So which one are you talking about the Vista FW, Onecare's FW, or Windows Defender? Quote
Guest Golard Posted October 21, 2008 Posted October 21, 2008 "Ollis" <No@No.com> a écrit dans le message de news: 6816DFA9-87F5-4351-899F-A5F92405CC5D@microsoft.com...<span style="color:blue"> > > > "Golard" wrote: ><span style="color:green"> > > > > "Ollis" <No@No.com> a écrit dans le message de news: > > 299CEA9C-47D9-4A1C-A86A-C87997A79DAD@microsoft.com...<span style="color:darkred"> > > > > > > > > > "Golard" wrote: > > > > > > > Hi, > > > > Since few years, I'm developping a professionnal software. > > > > I want to make it work on Vista SP1, with Windows Defender active. > > > > > > > > WITHOUT windows defender, it's OK. > > > > With Windows Defender active, I've got a FTP error (error n°10060:</span></span></span> The<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > > current connection has timedout). > > > > With Windows Defender active, FTP commands are working in a</span></span></span> command<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > > console > > > > > > > > I've add an inbound and an outbound rule in windows defender to open</span> > > port 20<span style="color:darkred"> > > > > & 21 but nothing change... > > > > My application is using a COM object to do FTP. > > > > > > > > Please can you help me to make my application work ??? > > > > > > > > > > > > > > > > > > Are you sure you're talking about the right program? Are you talking</span></span></span> about<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > the Windows Firewall and not Windows Defender? > > > > > > I can't see where Windows Defender would be concerned with FTP ports. > > ></span> > > > > "Windows Defender" is the name of the new Windows Vista firewall. > > Of course Windows Defender control TCP and UDP ports and many other</span></span> things.<span style="color:blue"><span style="color:green"> > > Does anybody know HOW to setup windows defender concerning my problem</span></span> above<span style="color:blue"><span style="color:green"> > > ?</span> > > http://en.wikipedia.org/wiki/Windows_Defender > http://www.microsoft.com/windows/windows-v...s/firewall.aspx > http://whitepapers.silicon.com/0,39024759,60265463p,00.htm > > > So which one are you talking about the Vista FW, Onecare's FW, or Windows > Defender?</span> Ok, it appears that "Windows Defender" may be not the name of Vista FW... So I'm talking about VISTA FIREWALL (include in Vista environment). Maybe I will have more answers with this correction !!! Can you help me Ollis ? Quote
Guest Ollis Posted October 21, 2008 Posted October 21, 2008 "Golard" wrote: <span style="color:blue"> > > "Ollis" <No@No.com> a écrit dans le message de news: > 6816DFA9-87F5-4351-899F-A5F92405CC5D@microsoft.com...<span style="color:green"> > > > > > > "Golard" wrote: > ><span style="color:darkred"> > > > > > > "Ollis" <No@No.com> a écrit dans le message de news: > > > 299CEA9C-47D9-4A1C-A86A-C87997A79DAD@microsoft.com... > > > > > > > > > > > > "Golard" wrote: > > > > > > > > > Hi, > > > > > Since few years, I'm developping a professionnal software. > > > > > I want to make it work on Vista SP1, with Windows Defender active. > > > > > > > > > > WITHOUT windows defender, it's OK. > > > > > With Windows Defender active, I've got a FTP error (error n°10060:</span></span> > The<span style="color:green"><span style="color:darkred"> > > > > > current connection has timedout). > > > > > With Windows Defender active, FTP commands are working in a</span></span> > command<span style="color:green"><span style="color:darkred"> > > > > > console > > > > > > > > > > I've add an inbound and an outbound rule in windows defender to open > > > port 20 > > > > > & 21 but nothing change... > > > > > My application is using a COM object to do FTP. > > > > > > > > > > Please can you help me to make my application work ??? > > > > > > > > > > > > > > > > > > > > > > > Are you sure you're talking about the right program? Are you talking</span></span> > about<span style="color:green"><span style="color:darkred"> > > > > the Windows Firewall and not Windows Defender? > > > > > > > > I can't see where Windows Defender would be concerned with FTP ports. > > > > > > > > > > "Windows Defender" is the name of the new Windows Vista firewall. > > > Of course Windows Defender control TCP and UDP ports and many other</span></span> > things.<span style="color:green"><span style="color:darkred"> > > > Does anybody know HOW to setup windows defender concerning my problem</span></span> > above<span style="color:green"><span style="color:darkred"> > > > ?</span> > > > > http://en.wikipedia.org/wiki/Windows_Defender > > http://www.microsoft.com/windows/windows-v...s/firewall.aspx > > http://whitepapers.silicon.com/0,39024759,60265463p,00.htm > > > > > > So which one are you talking about the Vista FW, Onecare's FW, or Windows > > Defender?</span> > > Ok, it appears that "Windows Defender" may be not the name of Vista FW... > So I'm talking about VISTA FIREWALL (include in Vista environment). > Maybe I will have more answers with this correction !!! > Can you help me Ollis ? > </span> http://support.microsoft.com/kb/947709 It's not your FTP COM object that it's talking about, but it does talk about how to open the FTP port by setting a FW rule using Netsh at the Command Prompt. <http://blogs.iis.net/jaroslad/archive/2007/09/29/windows-firewall-setup-for-microsoft-ftp-publishing-service-for-iis-7-0.aspx> Are you trying to access the FTP service over the Internet? Is there a router or firewall appliance that also needs the FTP ports open, if trying to access the FTP over the Internet? Are you in a LAN situation that you can use another machine on the LAN to access the FTP server running on the host machine? Quote
Guest Beoweolf Posted October 21, 2008 Posted October 21, 2008 Diagnostics of Fire Wall problems, remotely, is extremely difficult, frustrating and generally requires repeated "back and forth", repetitive questioning. From your reported attempts to resolve the problem, I am somewhat confident that You know your way around the OS, so maybe the steps listed below may help you find or at least narrow down possible solutions to the problem. (This troubleshooting technique pretty much outlines the steps I would take in chasing this issue). Bonheur One of the security features included with Windows Vista (and Windows XP Service Pack 2) is the Windows Firewall. It is a built in firewall component that is designed to protect your computer when connected to an un-trusted network such as the Internet. Because of the importance a firewall plays in protecting your computer, it is enabled by default when you install Vista. You may want to take this one step further and monitor the type of traffic that is being discarded by your firewall. This can be done by enabling security logging using the steps outlined below. 1. Click Start, All Programs, and Administrative Tools. 2. Select Windows Firewall with Advanced Security. 3. Click Windows Firewall Properties. 4. Click one of the profile tabs, such as Public Profile. 5. Click the Customize button within the Logging area. 6. Enable firewall logging from the dialog box that appears. 7. Click OK. "Golard" <laurent.je.gaillard@hotmail.fr> wrote in message news:ez$BvMrMJHA.740@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> > Hi, > Since few years, I'm developping a professionnal software. > I want to make it work on Vista SP1, with Windows Defender active. > > WITHOUT windows defender, it's OK. > With Windows Defender active, I've got a FTP error (error n°10060: The > current connection has timedout). > With Windows Defender active, FTP commands are working in a command > console > > I've add an inbound and an outbound rule in windows defender to open port > 20 > & 21 but nothing change... > My application is using a COM object to do FTP. > > Please can you help me to make my application work ??? > > </span> Quote
Guest Golard Posted October 21, 2008 Posted October 21, 2008 "Ollis" <No@No.com> a écrit dans le message de news: 3CC7D1DD-29C8-404A-B1E3-67C3112F761C@microsoft.com...<span style="color:blue"> > > > "Golard" wrote: ><span style="color:green"> > > > > "Ollis" <No@No.com> a écrit dans le message de news: > > 6816DFA9-87F5-4351-899F-A5F92405CC5D@microsoft.com...<span style="color:darkred"> > > > > > > > > > "Golard" wrote: > > > > > > > > > > > "Ollis" <No@No.com> a écrit dans le message de news: > > > > 299CEA9C-47D9-4A1C-A86A-C87997A79DAD@microsoft.com... > > > > > > > > > > > > > > > "Golard" wrote: > > > > > > > > > > > Hi, > > > > > > Since few years, I'm developping a professionnal software. > > > > > > I want to make it work on Vista SP1, with Windows Defender</span></span></span> active.<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > > > > > > > > > > WITHOUT windows defender, it's OK. > > > > > > With Windows Defender active, I've got a FTP error (error</span></span></span> n°10060:<span style="color:blue"><span style="color:green"> > > The<span style="color:darkred"> > > > > > > current connection has timedout). > > > > > > With Windows Defender active, FTP commands are working in a</span> > > command<span style="color:darkred"> > > > > > > console > > > > > > > > > > > > I've add an inbound and an outbound rule in windows defender to</span></span></span> open<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > > port 20 > > > > > > & 21 but nothing change... > > > > > > My application is using a COM object to do FTP. > > > > > > > > > > > > Please can you help me to make my application work ??? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Are you sure you're talking about the right program? Are you</span></span></span> talking<span style="color:blue"><span style="color:green"> > > about<span style="color:darkred"> > > > > > the Windows Firewall and not Windows Defender? > > > > > > > > > > I can't see where Windows Defender would be concerned with FTP</span></span></span> ports.<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > > > > > > > > > > > "Windows Defender" is the name of the new Windows Vista firewall. > > > > Of course Windows Defender control TCP and UDP ports and many other</span> > > things.<span style="color:darkred"> > > > > Does anybody know HOW to setup windows defender concerning my</span></span></span> problem<span style="color:blue"><span style="color:green"> > > above<span style="color:darkred"> > > > > ? > > > > > > http://en.wikipedia.org/wiki/Windows_Defender > > > http://www.microsoft.com/windows/windows-v...s/firewall.aspx > > > http://whitepapers.silicon.com/0,39024759,60265463p,00.htm > > > > > > > > > So which one are you talking about the Vista FW, Onecare's FW, or</span></span></span> Windows<span style="color:blue"><span style="color:green"><span style="color:darkred"> > > > Defender?</span> > > > > Ok, it appears that "Windows Defender" may be not the name of Vista</span></span> FW...<span style="color:blue"><span style="color:green"> > > So I'm talking about VISTA FIREWALL (include in Vista environment). > > Maybe I will have more answers with this correction !!! > > Can you help me Ollis ? > ></span> > > http://support.microsoft.com/kb/947709 > > It's not your FTP COM object that it's talking about, but it does talk</span> about<span style="color:blue"> > how to open the FTP port by setting a FW rule using Netsh at the Command > Prompt. > ></span> <http://blogs.iis.net/jaroslad/archive/2007...ewall-setup-for -microsoft-ftp-publishing-service-for-iis-7-0.aspx><span style="color:blue"> > > Are you trying to access the FTP service over the Internet? Is there a > router or firewall appliance that also needs the FTP ports open, if trying</span> to<span style="color:blue"> > access the FTP over the Internet? > > Are you in a LAN situation that you can use another machine on the LAN to > access the FTP server running on the host machine? > > ></span> Thank you for your informations. I have already try to use "netsh advfirewall firewall add ..." to open ports 20 & 21, but it doesn't change anything. I use already "netsh advfirewall firewall add ..." to allow ICMPv4 echo request to allow ping in and outbound, and it works. I use also already "netsh advfirewall firewall add ..." to allow my apllication to communicate in and outbound. I think ports 20 & 21 are now open BUT it's maybe not the source of my problem... Let me mention again that I've got a FTP timedout connexion when vista firewall is active, and that it works when it's deactivate. To answer your questions, my application use FTP to transfert configuration files between the PC and electronic devices (which are linux pcs also developped in my company) on a LOCAL network (most of the time dedicated to our system). So, nothing to do with internet connexion via a host machine. My application use a COM object to do FTP (FTPX from "Mabry software" which unfortunately is not support anymore) and I find in the documentation that it "does not support SSL" (Secure Socket Layers). But I don't know what does it mean... Do you think it can have something to do with my timedout problem through the vista firewall ??? Thanks for your help Quote
Guest Ollis Posted October 21, 2008 Posted October 21, 2008 "Golard" wrote: <span style="color:blue"> > Thank you for your informations. > > I have already try to use "netsh advfirewall firewall add ..." to open ports > 20 & 21, but it doesn't change anything. > I use already "netsh advfirewall firewall add ..." to allow ICMPv4 echo > request to allow ping in and outbound, and it works. > I use also already "netsh advfirewall firewall add ..." to allow my > apllication to communicate in and outbound. > > I think ports 20 & 21 are now open BUT it's maybe not the source of my > problem... > Let me mention again that I've got a FTP timedout connexion when vista > firewall is active, and that it works when it's deactivate. > > To answer your questions, my application use FTP to transfert configuration > files between the PC and electronic devices (which are linux pcs also > developped in my company) on a LOCAL network (most of the time dedicated to > our system). So, nothing to do with internet connexion via a host machine. > > My application use a COM object to do FTP (FTPX from "Mabry software" which > unfortunately is not support anymore) and I find in the documentation that > it "does not support SSL" (Secure Socket Layers). But I don't know what does > it mean... Do you think it can have something to do with my timedout problem > through the vista firewall ??? > </span> I don't know what to tell you. On one hand, you say that this FTP solution works with the Vista FW down. On the other hand you say that it doesn't work with the Vista FW up. I would say that the issue may be at the FW, still. If the host machine has IIS7 and you can enable the FTP server, I would test that you can make contact with FTP that way, or you could install a 3rd party FTP server like Filezilla for Vista and check-out the FTP ports 20 and 21 that way to see if things work. If that works, then I guess it's back to this program you have hosting your FTP COM object. Quote
Guest Golard Posted October 23, 2008 Posted October 23, 2008 "Beoweolf" <zenner@zenner-assc.com> a écrit dans le message de news: CF6995A8-ECB9-431F-9D1A-6E4B0810D159@microsoft.com...<span style="color:blue"> > Diagnostics of Fire Wall problems, remotely, is extremely difficult, > frustrating and generally requires repeated "back and forth", repetitive > questioning. > > From your reported attempts to resolve the problem, I am somewhat</span> confident<span style="color:blue"> > that You know your way around the OS, so maybe the steps listed below may > help you find or at least narrow down possible solutions to the problem. > > (This troubleshooting technique pretty much outlines the steps I would</span> take<span style="color:blue"> > in chasing this issue). Bonheur > > > One of the security features included with Windows Vista (and Windows XP > Service Pack 2) is the Windows Firewall. It is a built in firewall</span> component<span style="color:blue"> > that is designed to protect your computer when connected to an un-trusted > network such as the Internet. Because of the importance a firewall plays</span> in<span style="color:blue"> > protecting your computer, it is enabled by default when you install Vista. > > You may want to take this one step further and monitor the type of traffic > that is being discarded by your firewall. This can be done by enabling > security logging using the steps outlined below. > > 1. Click Start, All Programs, and Administrative Tools. > 2. Select Windows Firewall with Advanced Security. > 3. Click Windows Firewall Properties. > 4. Click one of the profile tabs, such as Public Profile. > 5. Click the Customize button within the Logging area. > 6. Enable firewall logging from the dialog box that appears. > 7. Click OK. ></span> Hi Beowolf and thank you for the idea of enabling the log. What I did: Log enabling in the 3 firewall profiles tabs. Activate Vista Firewall Activate all my inbound and outbound rules (allow for my application, for ICMPv4 ping, 20 & 21 ports for FTP) Activate dynamically open ports for FTP data connections (set global statefulFTP enable) Launch my application ==> FTP connexion timedout The ONLY LINE I find in the log which seems to concern FTP is : action=allow protocol=TCP src-ip= PC application IP (192.168.200.100) dst-ip = target device IP (192.168.200.3) src-port=49183 ? dst-port=21 (ok it's FTP command port, I suppose for the connexion) path= SEND There is NO lines coming from the target device (192.168.200.3) after the line above. After this I made again tests with vista FW disable: When I deactivate the vista firewall, FTP connexion and files tranfert os OK (but no log of course...) When I activate the visat firewall, AND allow all incoming and outbound connexions for each of the 3 firewall profiles, I have again the timedout. What is the conclusion ? Does it means that it's not a firewall RULE problem... but something else in the firewall ? Do you know what can block my FTP connexion in the firewall when I allow all in and out connexion ? Quote
Guest Golard Posted October 23, 2008 Posted October 23, 2008 "Ollis" <No@No.com> a écrit dans le message de news: 2110256E-8A5B-4651-A8A1-586116BF844F@microsoft.com...<span style="color:blue"> > > > "Golard" wrote: ><span style="color:green"> > > Thank you for your informations. > > > > I have already try to use "netsh advfirewall firewall add ..." to open</span></span> ports<span style="color:blue"><span style="color:green"> > > 20 & 21, but it doesn't change anything. > > I use already "netsh advfirewall firewall add ..." to allow ICMPv4 echo > > request to allow ping in and outbound, and it works. > > I use also already "netsh advfirewall firewall add ..." to allow my > > apllication to communicate in and outbound. > > > > I think ports 20 & 21 are now open BUT it's maybe not the source of my > > problem... > > Let me mention again that I've got a FTP timedout connexion when vista > > firewall is active, and that it works when it's deactivate. > > > > To answer your questions, my application use FTP to transfert</span></span> configuration<span style="color:blue"><span style="color:green"> > > files between the PC and electronic devices (which are linux pcs also > > developped in my company) on a LOCAL network (most of the time dedicated</span></span> to<span style="color:blue"><span style="color:green"> > > our system). So, nothing to do with internet connexion via a host</span></span> machine.<span style="color:blue"><span style="color:green"> > > > > My application use a COM object to do FTP (FTPX from "Mabry software"</span></span> which<span style="color:blue"><span style="color:green"> > > unfortunately is not support anymore) and I find in the documentation</span></span> that<span style="color:blue"><span style="color:green"> > > it "does not support SSL" (Secure Socket Layers). But I don't know what</span></span> does<span style="color:blue"><span style="color:green"> > > it mean... Do you think it can have something to do with my timedout</span></span> problem<span style="color:blue"><span style="color:green"> > > through the vista firewall ??? > ></span> > > I don't know what to tell you. On one hand, you say that this FTP solution > works with the Vista FW down. On the other hand you say that it doesn't</span> work<span style="color:blue"> > with the Vista FW up. > > I would say that the issue may be at the FW, still. > > If the host machine has IIS7 and you can enable the FTP server, I would</span> test<span style="color:blue"> > that you can make contact with FTP that way, or you could install a 3rd</span> party<span style="color:blue"> > FTP server like Filezilla for Vista and check-out the FTP ports 20 and 21 > that way to see if things work. > > If that works, then I guess it's back to this program you have hosting</span> your<span style="color:blue"> > FTP COM object. > ></span> Hi Ollis and thank you for your help! I'll try the FTP server today if I've time, and of course I will tell you as soon as I will have the result. Before this, I have maybe a new information you can read in my Beowolf answer. Here is an ABSTRACT: (...) When I deactivate the vista firewall, FTP connexion and files tranfert os OK (but no log of course...) When I activate the visat firewall, AND allow all incoming and outbound connexions for each of the 3 firewall profiles, I have again the timedout. (...) I am now wondering about what can block my FTP connexion when ALL incoming and outbound connexions are allowed by the Firewall ! What is sure is that it's SOMETHING IN THE FIREWALL ! Have you got ideas ? Quote
Guest Olivier Posted October 23, 2008 Posted October 23, 2008 > J'ai essayé d'ajouter des règles entrantes et sortantes dans windows<span style="color:blue"> > defender pour ouvrir les ports 20 & 21, mais ça ne change rien...</span> Ici (clients et serveur ftp) TCP 21 Entrant et TCP 20 Sortant fonctionnent... peut-être configurer le mode passif sur le client? @Bientôt -- Olivier C Quote
Guest Golard Posted October 24, 2008 Posted October 24, 2008 "Olivier" a écrit dans le message de news: uAhcgkSNJHA.6044@TK2MSFTNGP02.phx.gbl...<span style="color:blue"><span style="color:green"> > > J'ai essayé d'ajouter des règles entrantes et sortantes dans windows > > defender pour ouvrir les ports 20 & 21, mais ça ne change rien...</span> > > > Ici (clients et serveur ftp) TCP 21 Entrant et TCP 20 Sortant > fonctionnent... > peut-être configurer le mode passif sur le client? > > @Bientôt > > -- > Olivier C ></span> Mon client est bien en mode passif. J'ai autorisé les ports 20 & 21 entrant et sortant. Etes-vous sous Vista ? Y aurait-il un service à activer ? Connaissez-vous le service "ftpsvc" que je ne trouve pas sous Vista ? Merci d'avance. Quote
Guest Olivier Posted October 24, 2008 Posted October 24, 2008 Bonsoir Laurent, <span style="color:blue"> > Mon client est bien en mode passif.</span> Ok, <span style="color:blue"> > J'ai autorisé les ports 20 & 21 entrant et sortant.</span> TCP ? <span style="color:blue"> > FTP commands are working in a command console</span> C'est donc que le firewall est bien configuré pour un client FTP <span style="color:blue"> > Etes-vous sous Vista ?</span> Oui, Home Premium <span style="color:blue"> > Y aurait-il un service à activer ?</span> Si le programme est un serveur FTP, il y a des chances que oui. <span style="color:blue"> > Connaissez-vous le service "ftpsvc" que je ne trouve pas sous Vista ?</span> Non, mon serveur n'utilise pas ce service... <span style="color:blue"> > With Windows Defender active,</span> Windows Defender ? Vérifier l'autorisation du programme, de l'OCX ? <span style="color:blue"> > FTPX from "Mabry software"</span> http://www.juniper.net/security/auto/vulne...s/vuln8040.html <span style="color:blue"> > SSL:</span> http://fr.wikipedia.org/wiki/Transport_Layer_Security @Bientôt -- Olivier C Quote
Guest Golard Posted October 27, 2008 Posted October 27, 2008 "Olivier" a écrit dans le message de news: e38VNxgNJHA.1472@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> > Bonsoir Laurent, ><span style="color:green"> > > Mon client est bien en mode passif.</span> > > Ok,</span> ------------------Ok <span style="color:blue"> ><span style="color:green"> > > J'ai autorisé les ports 20 & 21 entrant et sortant.</span> > > TCP ?</span> ------------------Oui TCP <span style="color:blue"> ><span style="color:green"> > > FTP commands are working in a command console</span> > > C'est donc que le firewall est bien configuré pour un client FTP</span> ------------------Je pense aussi que les règles sont ok pour un client FTP... ------------------Quel est donc l'élément que le pare-feu bloque pour que la connexion de mon client FTP soit en timeout (pas de timeout si je désactive le pare-feu) ??? <span style="color:blue"> ><span style="color:green"> > > Etes-vous sous Vista ?</span> > > Oui, Home Premium</span> ------------------Moi en Vista Professionnel, upgradé en SP1 <span style="color:blue"> ><span style="color:green"> > > Y aurait-il un service à activer ?</span> > > Si le programme est un serveur FTP, il y a des chances que oui.</span> -------------------Mon programme n'est pas un serveur, mais un client FTP <span style="color:blue"> ><span style="color:green"> > > Connaissez-vous le service "ftpsvc" que je ne trouve pas sous Vista ?</span> > > Non, mon serveur n'utilise pas ce service...</span> -------------------Ok j'abandonne cette piste (aucune trace de ce service sous vista) <span style="color:blue"> ><span style="color:green"> > > With Windows Defender active,</span> > > Windows Defender ? > Vérifier l'autorisation du programme, de l'OCX ?</span> --------------------Il s'agit bien du pare-feu Vista (et pas de windows defender) --------------------Mon programme utilise la DLL Mabry FTPX.dll. --------------------Dois-je donner des droits à cette dll, et comment ??? Il me semble que je ne peux donner des droits qu'à des exe, des ports/protocole ou des services... <span style="color:blue"> ><span style="color:green"> > > FTPX from "Mabry software"</span> > http://www.juniper.net/security/auto/vulne...s/vuln8040.html</span> --------------------Merci pour l'info. Je ne pense pas être concerné puisque j'utilise la DLL FTPX.dll version 2.03.034 de janvier 2002, à moins que les composants Mabry soient globalement devenus systématiquement bloqués par Vista ? Comment dans ce cas le savoir et l'inhiber ? <span style="color:blue"> ><span style="color:green"> > > SSL:</span> > http://fr.wikipedia.org/wiki/Transport_Layer_Security</span> -------------------Merci. Je ne pense donc pas être concerné par un tel processus d'identification et de certificat... <span style="color:blue"> > > > @Bientôt</span> -------------------MERCI pour ton aide. Tu me serais d'une grande aide si tu pouvais répondre principalement aux 2 questions avec 3 points d'interrogation ! Je te les rappele ci-dessous: Quel est donc l'élément que le pare-feu bloque pour que la connexion de mon client FTP soit en timeout (pas de timeout si je désactive le pare-feu) ??? Dois-je donner des droits à cette dll, et comment ??? <span style="color:blue"> > -- > Olivier C ></span> Quote
Guest Golard Posted October 27, 2008 Posted October 27, 2008 <span style="color:blue"> > "Ollis" <No@No.com> a écrit dans le message de news: > 2110256E-8A5B-4651-A8A1-586116BF844F@microsoft.com...<span style="color:green"> > > I don't know what to tell you. On one hand, you say that this FTP</span></span> solution<span style="color:blue"><span style="color:green"> > > works with the Vista FW down. On the other hand you say that it doesn't</span> > work<span style="color:green"> > > with the Vista FW up. > > > > I would say that the issue may be at the FW, still. > > > > If the host machine has IIS7 and you can enable the FTP server, I would</span> > test<span style="color:green"> > > that you can make contact with FTP that way, or you could install a 3rd</span> > party<span style="color:green"> > > FTP server like Filezilla for Vista and check-out the FTP ports 20 and</span></span> 21<span style="color:blue"><span style="color:green"> > > that way to see if things work. > > > > If that works, then I guess it's back to this program you have hosting</span> > your<span style="color:green"> > > FTP COM object. > > > ></span></span> Hi, Here is the results of test I made with 3rd party FTP application. In all tests, I test FTP client which connect with login and password to the same FTP server on the same local machine in my network. FileZilla with Vista firewall disable ----------Connect Send and Get ok My Application with Vista firewall disable ----------Connect Send and Get ok FileZilla with Vista firewall enable + rules ----------Connect Send and Get ok My Application with Vista firewall enable + rules ----------Systematic connect timeout An important indication is that, in case of multi command list, I've got connect timeout only on the first command (I try to connect on each command if I'm not already connected). So maybe my FTP client is not really block as I thought, but slow down on the first connect try. Can you help me about this "Systematic connect timeout" ? Why does it not append when firewall is disable ? In advance thank you, Golard. Quote
Guest Ollis Posted October 27, 2008 Posted October 27, 2008 "Golard" wrote: <span style="color:blue"> > <span style="color:green"> > > "Ollis" <No@No.com> a écrit dans le message de news: > > 2110256E-8A5B-4651-A8A1-586116BF844F@microsoft.com...<span style="color:darkred"> > > > I don't know what to tell you. On one hand, you say that this FTP</span></span> > solution<span style="color:green"><span style="color:darkred"> > > > works with the Vista FW down. On the other hand you say that it doesn't</span> > > work<span style="color:darkred"> > > > with the Vista FW up. > > > > > > I would say that the issue may be at the FW, still. > > > > > > If the host machine has IIS7 and you can enable the FTP server, I would</span> > > test<span style="color:darkred"> > > > that you can make contact with FTP that way, or you could install a 3rd</span> > > party<span style="color:darkred"> > > > FTP server like Filezilla for Vista and check-out the FTP ports 20 and</span></span> > 21<span style="color:green"><span style="color:darkred"> > > > that way to see if things work. > > > > > > If that works, then I guess it's back to this program you have hosting</span> > > your<span style="color:darkred"> > > > FTP COM object. > > > > > ></span></span> > > > Hi, > > Here is the results of test I made with 3rd party FTP application. > In all tests, I test FTP client which connect with login and password to the > same FTP server on the same local machine in my network. > > FileZilla with Vista firewall disable ----------Connect Send and Get ok > My Application with Vista firewall disable ----------Connect Send and Get ok > FileZilla with Vista firewall enable + rules ----------Connect Send and Get > ok > My Application with Vista firewall enable + rules ----------Systematic > connect timeout > > An important indication is that, in case of multi command list, I've got > connect timeout only on the first command (I try to connect on each command > if I'm not already connected). > > So maybe my FTP client is not really block as I thought, but slow down on > the first connect try. > > Can you help me about this "Systematic connect timeout" ? > Why does it not append when firewall is disable ? > > In advance thank you, > </span> http://ask.metafilter.com/93060/Vista-FTP-connection-delay Maybe, you should do a Google search for more infromation above and a possible solution. Have you tried looking for a 3rd party FTP DLL that works on Vista with the Vista firewall enabled? Quote
Guest Golard Posted October 28, 2008 Posted October 28, 2008 "Ollis" <No@No.com> a écrit dans le message de news: 19336AD1-2587-43B1-AAD1-50F81E86A15C@microsoft.com...<span style="color:blue"> > > > http://ask.metafilter.com/93060/Vista-FTP-connection-delay > > Maybe, you should do a Google search for more infromation above and a > possible solution. > > Have you tried looking for a 3rd party FTP DLL that works on Vista with</span> the<span style="color:blue"> > Vista firewall enabled? ></span> I made other tests and it appears that the problem disappears with a longer timeout delay. It's not a pb of 3rd party FTP DLL: I'm only using a FTP client, and I got the same problem with 3rd party FTP client. With vista firewall disable : FTP connection delay is around 3 seconds With vista firewall ENABLE : FTP connection delay is around 13 seconds !!! Your article above (http://ask.metafilter.com/93060/Vista-FTP-connection-delay) talk about EXACTLY my problem ! THANK YOU to find it !!! UNFORTUNALETLY, there is no solution at the moment for this problem. I opened port 113 TCP and UDP, in and out : no changes I allowed FTP data traffic by setting global statefulftp enable : no changes My only solution at the moment to make my application work with vista firewall enable is to increase FTP timeout to 15 seconds. This way I don't have anymore timeout message, ... but a long long delay for FTP connection... which is annoying ! I still have hopes of improving this delay with the help of developpers community... Write me if you have any idea ! Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.