Twitter iPhone pliant OnePlus 11 PS5 Disney+ Orange Livebox Windows 11

FTP connection timedout when Vista Windows Defender active

18 réponses
Avatar
Golard
Hi,
Since few years, I'm developping a professionnal software.
I want to make it work on Vista SP1, with Windows Defender active.

* WITHOUT windows defender, it's OK.
* With Windows Defender active, I've got a FTP error (error n°10060: The
current connection has timedout).
* With Windows Defender active, FTP commands are working in a command
console

I've add an inbound and an outbound rule in windows defender to open port 20
& 21 but nothing change...
My application is using a COM object to do FTP.

Please can you help me to make my application work ???

8 réponses

1 2
Avatar
Golard
"Ollis" a écrit dans le message de news:



"Golard" wrote:

> Thank you for your informations.
>
> I have already try to use "netsh advfirewall firewall add ..." to open


ports
> 20 & 21, but it doesn't change anything.
> I use already "netsh advfirewall firewall add ..." to allow ICMPv4 echo
> request to allow ping in and outbound, and it works.
> I use also already "netsh advfirewall firewall add ..." to allow my
> apllication to communicate in and outbound.
>
> I think ports 20 & 21 are now open BUT it's maybe not the source of my
> problem...
> Let me mention again that I've got a FTP timedout connexion when vista
> firewall is active, and that it works when it's deactivate.
>
> To answer your questions, my application use FTP to transfert


configuration
> files between the PC and electronic devices (which are linux pcs also
> developped in my company) on a LOCAL network (most of the time dedicated


to
> our system). So, nothing to do with internet connexion via a host


machine.
>
> My application use a COM object to do FTP (FTPX from "Mabry software"


which
> unfortunately is not support anymore) and I find in the documentation


that
> it "does not support SSL" (Secure Socket Layers). But I don't know what


does
> it mean... Do you think it can have something to do with my timedout


problem
> through the vista firewall ???
>

I don't know what to tell you. On one hand, you say that this FTP solution
works with the Vista FW down. On the other hand you say that it doesn't


work
with the Vista FW up.

I would say that the issue may be at the FW, still.

If the host machine has IIS7 and you can enable the FTP server, I would


test
that you can make contact with FTP that way, or you could install a 3rd


party
FTP server like Filezilla for Vista and check-out the FTP ports 20 and 21
that way to see if things work.

If that works, then I guess it's back to this program you have hosting


your
FTP COM object.





Hi Ollis and thank you for your help!

I'll try the FTP server today if I've time, and of course I will tell you as
soon as I will have the result.

Before this, I have maybe a new information you can read in my Beowolf
answer.

Here is an ABSTRACT:

(...)
* When I deactivate the vista firewall, FTP connexion and files tranfert os
OK (but no log of course...)
* When I activate the visat firewall, AND allow all incoming and outbound
connexions for each of the 3 firewall profiles, I have again the timedout.
(...)

I am now wondering about what can block my FTP connexion when ALL incoming
and outbound connexions are allowed by the Firewall !
What is sure is that it's SOMETHING IN THE FIREWALL !
Have you got ideas ?
Avatar
Olivier
> J'ai essayé d'ajouter des règles entrantes et sortantes dans windows
defender pour ouvrir les ports 20 & 21, mais ça ne change rien...




Ici (clients et serveur ftp) TCP 21 Entrant et TCP 20 Sortant
fonctionnent...
peut-être configurer le mode passif sur le client?

@Bientôt

--
Olivier C
Avatar
Golard
"Olivier" a écrit dans le message de news:

> J'ai essayé d'ajouter des règles entrantes et sortantes dans windows
> defender pour ouvrir les ports 20 & 21, mais ça ne change rien...


Ici (clients et serveur ftp) TCP 21 Entrant et TCP 20 Sortant
fonctionnent...
peut-être configurer le mode passif sur le client?

@Bientôt

--
Olivier C




Mon client est bien en mode passif.
J'ai autorisé les ports 20 & 21 entrant et sortant.

Etes-vous sous Vista ?

Y aurait-il un service à activer ? Connaissez-vous le service "ftpsvc" que
je ne trouve pas sous Vista ?

Merci d'avance.
Avatar
Olivier
Bonsoir Laurent,

Mon client est bien en mode passif.



Ok,

J'ai autorisé les ports 20 & 21 entrant et sortant.



TCP ?

FTP commands are working in a command console



C'est donc que le firewall est bien configuré pour un client FTP

Etes-vous sous Vista ?



Oui, Home Premium

Y aurait-il un service à activer ?



Si le programme est un serveur FTP, il y a des chances que oui.

Connaissez-vous le service "ftpsvc" que je ne trouve pas sous Vista ?



Non, mon serveur n'utilise pas ce service...

> * With Windows Defender active,

Windows Defender ?
Vérifier l'autorisation du programme, de l'OCX ?

FTPX from "Mabry software"


http://www.juniper.net/security/auto/vulnerabilities/vuln8040.html

SSL:


http://fr.wikipedia.org/wiki/Transport_Layer_Security


@Bientôt
--
Olivier C
Avatar
Golard
"Olivier" a écrit dans le message de news:

Bonsoir Laurent,

> Mon client est bien en mode passif.

Ok,


------------------Ok


> J'ai autorisé les ports 20 & 21 entrant et sortant.

TCP ?


------------------Oui TCP


> FTP commands are working in a command console

C'est donc que le firewall est bien configuré pour un client FTP


------------------Je pense aussi que les règles sont ok pour un client
FTP...
------------------Quel est donc l'élément que le pare-feu bloque pour que la
connexion de mon client FTP soit en timeout (pas de timeout si je désactive
le pare-feu) ???


> Etes-vous sous Vista ?

Oui, Home Premium


------------------Moi en Vista Professionnel, upgradé en SP1


> Y aurait-il un service à activer ?

Si le programme est un serveur FTP, il y a des chances que oui.


-------------------Mon programme n'est pas un serveur, mais un client FTP


> Connaissez-vous le service "ftpsvc" que je ne trouve pas sous Vista ?

Non, mon serveur n'utilise pas ce service...


-------------------Ok j'abandonne cette piste (aucune trace de ce service
sous vista)


> * With Windows Defender active,

Windows Defender ?
Vérifier l'autorisation du programme, de l'OCX ?


--------------------Il s'agit bien du pare-feu Vista (et pas de windows
defender)
--------------------Mon programme utilise la DLL Mabry FTPX.dll.
--------------------Dois-je donner des droits à cette dll, et comment ??? Il
me semble que je ne peux donner des droits qu'à des exe, des ports/protocole
ou des services...


> FTPX from "Mabry software"
http://www.juniper.net/security/auto/vulnerabilities/vuln8040.html


--------------------Merci pour l'info. Je ne pense pas être concerné puisque
j'utilise la DLL FTPX.dll version 2.03.034 de janvier 2002, à moins que les
composants Mabry soient globalement devenus systématiquement bloqués par
Vista ? Comment dans ce cas le savoir et l'inhiber ?


> SSL:
http://fr.wikipedia.org/wiki/Transport_Layer_Security


-------------------Merci. Je ne pense donc pas être concerné par un tel
processus d'identification et de certificat...



@Bientôt


-------------------MERCI pour ton aide. Tu me serais d'une grande aide si tu
pouvais répondre principalement aux 2 questions avec 3 points
d'interrogation !
Je te les rappele ci-dessous:
Quel est donc l'élément que le pare-feu bloque pour que la connexion de mon
client FTP soit en timeout (pas de timeout si je désactive le pare-feu) ???
Dois-je donner des droits à cette dll, et comment ???

--
Olivier C



Avatar
Golard
> "Ollis" a écrit dans le message de news:

> I don't know what to tell you. On one hand, you say that this FTP


solution
> works with the Vista FW down. On the other hand you say that it doesn't
work
> with the Vista FW up.
>
> I would say that the issue may be at the FW, still.
>
> If the host machine has IIS7 and you can enable the FTP server, I would
test
> that you can make contact with FTP that way, or you could install a 3rd
party
> FTP server like Filezilla for Vista and check-out the FTP ports 20 and


21
> that way to see if things work.
>
> If that works, then I guess it's back to this program you have hosting
your
> FTP COM object.
>
>




Hi,

Here is the results of test I made with 3rd party FTP application.
In all tests, I test FTP client which connect with login and password to the
same FTP server on the same local machine in my network.

FileZilla with Vista firewall disable ----------Connect Send and Get ok
My Application with Vista firewall disable ----------Connect Send and Get ok
FileZilla with Vista firewall enable + rules ----------Connect Send and Get
ok
My Application with Vista firewall enable + rules ----------Systematic
connect timeout

An important indication is that, in case of multi command list, I've got
connect timeout only on the first command (I try to connect on each command
if I'm not already connected).

So maybe my FTP client is not really block as I thought, but slow down on
the first connect try.

Can you help me about this "Systematic connect timeout" ?
Why does it not append when firewall is disable ?

In advance thank you,

Golard.
Avatar
Ollis
"Golard" wrote:


> "Ollis" a écrit dans le message de news:
>
> > I don't know what to tell you. On one hand, you say that this FTP
solution
> > works with the Vista FW down. On the other hand you say that it doesn't
> work
> > with the Vista FW up.
> >
> > I would say that the issue may be at the FW, still.
> >
> > If the host machine has IIS7 and you can enable the FTP server, I would
> test
> > that you can make contact with FTP that way, or you could install a 3rd
> party
> > FTP server like Filezilla for Vista and check-out the FTP ports 20 and
21
> > that way to see if things work.
> >
> > If that works, then I guess it's back to this program you have hosting
> your
> > FTP COM object.
> >
> >


Hi,

Here is the results of test I made with 3rd party FTP application.
In all tests, I test FTP client which connect with login and password to the
same FTP server on the same local machine in my network.

FileZilla with Vista firewall disable ----------Connect Send and Get ok
My Application with Vista firewall disable ----------Connect Send and Get ok
FileZilla with Vista firewall enable + rules ----------Connect Send and Get
ok
My Application with Vista firewall enable + rules ----------Systematic
connect timeout

An important indication is that, in case of multi command list, I've got
connect timeout only on the first command (I try to connect on each command
if I'm not already connected).

So maybe my FTP client is not really block as I thought, but slow down on
the first connect try.

Can you help me about this "Systematic connect timeout" ?
Why does it not append when firewall is disable ?

In advance thank you,





http://ask.metafilter.com/93060/Vista-FTP-connection-delay

Maybe, you should do a Google search for more infromation above and a
possible solution.

Have you tried looking for a 3rd party FTP DLL that works on Vista with the
Vista firewall enabled?
Avatar
Golard
"Ollis" a écrit dans le message de news:



http://ask.metafilter.com/93060/Vista-FTP-connection-delay

Maybe, you should do a Google search for more infromation above and a
possible solution.

Have you tried looking for a 3rd party FTP DLL that works on Vista with


the
Vista firewall enabled?




I made other tests and it appears that the problem disappears with a longer
timeout delay.
It's not a pb of 3rd party FTP DLL: I'm only using a FTP client, and I got
the same problem with 3rd party FTP client.

With vista firewall disable : FTP connection delay is around 3 seconds
With vista firewall ENABLE : FTP connection delay is around 13 seconds !!!

Your article above
(http://ask.metafilter.com/93060/Vista-FTP-connection-delay) talk about
EXACTLY my problem !
THANK YOU to find it !!!

UNFORTUNALETLY, there is no solution at the moment for this problem.

I opened port 113 TCP and UDP, in and out : no changes
I allowed FTP data traffic by setting global statefulftp enable : no changes

My only solution at the moment to make my application work with vista
firewall enable is to increase FTP timeout to 15 seconds.
This way I don't have anymore timeout message, ... but a long long delay for
FTP connection... which is annoying !

I still have hopes of improving this delay with the help of developpers
community...

Write me if you have any idea !
1 2