NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

BrookHampton's avatar
BrookHampton
Aspirant
Jan 13, 2012

Stuck in FTP hell *&^%$#@!

Somehow I lost FTP access to my readynas duo thru my dlink Dir-855 router

We use ftp on the go pro on my iphone

We use the dlinkddns.com service

We get no response when trying to access the box, as if it does not exist. I can tell the internal (lan) ip address changed after a router reboot so I changed the address in the dlink Virtual FTP server. That did nothing. I tried to enable port forwarding and disable virtual server, that did nothing.


Can someone reschool me on the steps for FTP to make this work again?

10 Replies

Replies have been turned off for this discussion
  • also, when checking the logs I see this in the ftp log:

    Jan 13 18:51:24 BrookStore proftpd[11398] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
    Jan 13 13:51:43 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 13:52:02 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
    Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
    Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
    Jan 13 13:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): Preparing to chroot to directory '/home/ftp'
    Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER Kevin_Loiacono: Login successful.
    Jan 13 13:57:31 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 13:57:51 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
    Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
    Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
    Jan 13 18:59:27 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
    Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
    Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
    Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
    Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
    Jan 13 14:47:17 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 14:47:37 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
    Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
    Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
    Jan 13 15:18:38 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 15:18:58 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.

    any idea who that 166.168.50.199 is doing?

    Whois Data
    NetRange: 166.128.0.0 - 166.255.255.255
    CIDR: 166.128.0.0/9
    OriginAS:
    NetName: NETBLK-CDPD-B
    NetHandle: NET-166-128-0-0-1
    Parent: NET-166-0-0-0-0
    NetType: Direct Assignment
    RegDate: 1993-07-09
    Updated: 2005-01-07
    Ref: http://whois.arin.net/rest/net/NET-166-128-0-0-1

    OrgName: Service Provider Corporation
    OrgId: SPC-10
    Address: 73 Old Dublin Pike
    Address: Suite 10 City: Doylestown
    StateProv: PA
    PostalCode: 18901-2491
    Country: US
    RegDate: 1993-07-09
    Updated: 2009-11-16
    Ref: http://whois.arin.net/rest/org/SPC-10

    OrgTechHandle: WDSPC-ARIN
    OrgTechName: WDSPCo Helpdesk
    OrgTechPhone: +1-215-489-7599
    OrgTechEmail:
    OrgTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN

    OrgAbuseHandle: WDSPC-ARIN
    OrgAbuseName: WDSPCo Helpdesk
    OrgAbusePhone: +1-215-489-7599
    OrgAbuseEmail:
    OrgAbuseRef: http://whois.arin.net/rest/poc/WDSPC-ARIN

    OrgNOCHandle: WDSPC-ARIN
    OrgNOCName: WDSPCo Helpdesk
    OrgNOCPhone: +1-215-489-7599
    OrgNOCEmail:
    OrgNOCRef: http://whois.arin.net/rest/poc/WDSPC-ARIN

    RTechHandle: WDSPC-ARIN
    RTechName: WDSPCo Helpdesk
    RTechPhone: +1-215-489-7599
    RTechEmail:
    RTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
  • Jan 13 15:41:47 BrookStore proftpd[1097] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
    Jan 13 15:42:32 BrookStore proftpd[1593] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 15:42:52 BrookStore proftpd[1593] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
    Jan 13 15:48:19 BrookStore proftpd[1870] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
    Jan 13 15:48:38 BrookStore proftpd[1870] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.

    I think this below is me trying from my iphone...

    Jan 13 16:13:24 BrookStore proftpd[2810] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 16:13:24 BrookStore proftpd[2810] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
    Jan 13 16:13:24 BrookStore proftpd[2810] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.


    I think this is my login from inside my lan using internet explorer ftp://brookstore.dlinkddns.com

    Jan 13 16:13:36 BrookStore proftpd[2822] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 21:13:36 BrookStore proftpd[2822] 192.168.50.199 (24.186.71.49[24.186.71.49]): Preparing to chroot to directory '/home/ftp'
    Jan 13 21:13:36 BrookStore proftpd[2822] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER Kevin_Loiacono: Login successful.

    Jan 13 16:13:39 BrookStore proftpd[2824] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
    Jan 13 16:13:39 BrookStore proftpd[2824] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
    Jan 13 16:13:39 BrookStore proftpd[2824] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
  • Tried everything... I created a new group and set permissionsfor it and that worked. Do Users and groups get corrupted?
  • StephenB's avatar
    StephenB
    Guru - Experienced User
    BrookHampton wrote:
    bump...
    from your log, it appears that your client is using an anonymous logon. My guess is that the NAS is not configured to allow anonymous. With sparc and x86 models this is configured in services/standard file protocols (Authentication mode)

    Probably better to change the client config though, unless you want anyone on the internet to access your files.
  • StephenB's avatar
    StephenB
    Guru - Experienced User
    BrookHampton wrote:
    Thanks Stephen,

    Where do I address that?
    If you want to make the NAS files available to the entire planet you go into frontview. Select services on the left, you will see standard file protocols appear under it. Select it, then scroll down until you see FTP. There will be a list of parameters - first one is port, the second is authentication mode. Change the authenication mode to anonymous and press apply.

    Otherwise you need to specify the right user logon in your client. I use FileZilla - you can specify user name and password manually, or create an entry in he site manager that specifies the logon, etc for the NAS. Other clients will work differently.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More