FTP connections

CrimpOn
Guru
Aug 06, 2020
Well, I am now very confused.

Windows nslookup resolves the name to 167.219.6.21, which appears to be Deloitte Services, LP. (Maybe New York City?)

Since I got a connection yesterday, I tried today and got "unable to connect" on several browsers. Thought "how can this BE?" Before hitting "Post" on this message, I decided "better triple check that again", and NOW all of my browsers bring up this page:

Microsoft Edge produces a web site: https://ftp.deloittefed.com/EFTClient/Account/Login.htm
Chrome produces: the same
Firefox produces: the same
Opera produces: the same

So, I am in the Twilight Zone. First it works. Then it doesn't. Then it does again.

p.s. IP subnet 20.20.1.1 is in the middle of Microsoft's IP space. You may experience "unable to connect" if any program attempts to reach Microsoft servers.
Source: whois.arin.net
IP Address: 20.20.1.1
Name: MSFT
Handle: NET-20-0-0-0-1
Registration Date: 10/18/17
Range: 20.0.0.0-20.31.255.255
Org: Microsoft Corporation
Org Handle: MSFT
Address: One Microsoft Way
City: Redmond
State/Province: WA
Postal Code: 98052
Country: United States
michaelkenward
Guru
Aug 06, 2020
sjameel wrote:

I made a mistake in IP Addresses here.

The Spectrum Cable Modem is showing my ISP IP Address and not 198.xxxxxxxx

The Orbi Router, I have configured with 20.20.1.1 for LAN to start and not the Factory 198 one.

That makes two of us who are baffled.

I'm with CrimpOn . I have no idea what you are up to.

I start from basics.

You should have just one NAT device on your local network. Most people use either a separate modem and a standalone router or a combined modem/router to achieve this.

The trouble comes when they try to combine a modem/router with a standalone router. In that scenario, they have two routers vying to be the local NAT

If it is a modem/router with a standalone router, then they either disable the router bit of the modem, which takes it out of the NAT picture, or they disable the router of the standalone router and use it as a wireless access point.

Using addresses like 20.20.1.1 for LAN smells like trying to get around the "two routers" issue. Netgear's setup regime will go for something similar if it detects that someone is trying to pile router after router on to the network.

That may fix the NAT conflicts, but it also leads to other possible problems.

I throw that into the mix for entertainment rather than edification. I get lost when people start messing around with addresses like 20.20.1.1. It is rarely necessary. But I don't know what you are trying to achieve.

sjameel wrote:

When I disconnect the Orbi and connect directly to the Cable Modem, I am able to connect to https://ftp.deloittefed.com

To me this smells like router piled on router.

What is Double NAT? | Answer | NETGEAR Support
- sjameel
  Aspirant
  Aug 06, 2020
  Hope this helps.
  I work in a company where their IP address are 10.xxxxx
  I do not like to keep the 192.xxxx which comes as default on the routher. atleast, I was told to change it.
  So, I changed it, and changed it to 20.xxxx not knowing that Microsoft uses that.
  Now, I can change it any other IP for my LAN, I do not care on that. I can even leave it back to the factory default.
  
  My Cable Modem is a standalone Modem. It is not a Router or a Wifi Router.
  I have Orbi connect (wired) to my Cable Modem and all my devices connect to the Orbi.
  
  We have two people who work at two different companies.
  one for Deloitte and one for Enterprise.
  So, for Deloitte, I have to connect to ftp.deloittefed.com which is not working.
  It works for all other FTP sites, just not this.
  When I wire my laptop directly to the cable modem (removing wifi altogether), it connects.
  when I wifi it to Orbi, it does not.
  
  In the other laptop where it has VPN to Enterprise, when I connect to ftp.deloittefed.com, it works fine. When I disconnect from VPN, it does not.
  Really strange and something in the Orbi Router might be stopping this.
  - CrimpOn
    Guru
    Aug 06, 2020
    I am not convinced that using 20.20.1.1 for the Orbi LAN side will cause this particular issue.
    (It would make reaching any Microsoft IP in the 20.20.1.x subnet impossible, but Microsoft has so many public facing IP's that for a customer to need one in 20.20.1.x seems unlikely.)
    
    The bigger issue (to me) is my own situation. Unless I am having a "senior moment", just today I have had web browsers able to find https://ftp.deloittefed.com, unable to find it, and then able to find it again.
    
    I wonder what happens if you attempt connecting to https://ftp.deloittefed.com/EFTClient/Account/Login.htm
    
    One thought is that this is related to the deloitte.com DNS setup. Are these settings common?
    nslookup -type=soa ftp.deloittefed.com
    deloittefed.com
         primary name server = ns1.deloitte.com
         responsible mail addr = hostmaster.deloitte.com
         serial = 614590236
         refresh = 10800 (3 hours)
         retry = 600 (10 mins)
         expire = 1728000 (20 days)
         default TTL = 900 (15 mins)

Forum Discussion