FTP port?

Hello,
I am trying to use a non-standard FTP port (2121) with B2B (10.1.2) but it seems not to work as it should (or as I anticipate anyways).
I change the "receiver control port" and it picks up the files fine from the endpoint. But when it sends file it sends them to "port 21".
So is there spoused to be a "sender control port" somewhere or am I missing something?
I also noticed this post B2B Sftp Port number but that is about SFTP and this is vanilla plain old FTP so nothing fancy.
// Michael Medin

Yes, that is what I have configured as follows:
*Remote TP [CAB]:*
Delivery Channel:
Name: CAB_CABTest_EDIEL_DC
Document Exchange: CAB_EDIEL_FTPDocEx
Transport: CAB_CABTest_EDIEL_FTPTransport
Transport:
Name: CAB_CABTest_EDIEL_FTPTransport
Transport Server: CAB_CABTest_EDIEL_FTPTransportServer
URI:     /Recv
Transport Server [CAB_CABTest_EDIEL_FTPTransportServer]:
receiver control port = 2121
*Host TP [GoteborgEnergi]:*
Delivery Channel:
Name: GoteborgEnergi_CABTest_CAB_EDIEL_FTPDC
Document Exchange: GoteborgEnergi_EDIEL_DocEx
Transport: GoteborgEnergi_CABTest_CAB_EDIEL_FTPTransport
Transport:
Name: GoteborgEnergi_CABTest_CAB_EDIEL_FTPTransport
Transport Server: GoteborgEnergi_CABTest_CAB_EDIEL_FTPTransportServer
URI: /Send
Transport Server [GoteborgEnergi_CABTest_CAB_EDIEL_FTPTransportServer]:
receiver control port = 2121
The interesting thing here is that there is a FTP server at port 21 as well which is what is being used for sending:
Transport log like so:
2009.11.11 at 09:17:27:871: Thread-16: (DEBUG) FTPAgent.login(): Enter
2009.11.11 at 09:17:27:871: Thread-16: (DEBUG) Host name is 'cabkonvappinv'.
2009.11.11 at 09:17:27:874: Thread-16: (DEBUG) Host cabkonvappinv FTP command: USER cabftpt3edi
2009.11.11 at 09:17:27:874: Thread-16: (DEBUG) FTP Command: USER, reply:
*331 User name okay, need password.*
2009.11.11 at 09:17:27:874: Thread-16: (DEBUG) Host cabkonvappinv FTP command: PASS
2009.11.11 at 09:17:27:915: Thread-16: (DEBUG) FTP Command: PASS, reply:
2009.11.11 at 09:19:28:163: Thread-12: (DEBUG) FTPAgent.login(): Enter
2009.11.11 at 09:19:28:163: Thread-12: (DEBUG) Host name is 'cabkonvappinv'.
2009.11.11 at 09:19:28:164: Thread-12: (DEBUG) Host cabkonvappinv FTP command: USER cabftpt3edi
2009.11.11 at 09:19:28:164: Thread-12: (DEBUG) FTP Command: USER, reply:
*331 Password required for cabftpt3edi.*
2009.11.11 at 09:19:28:164: Thread-12: (DEBUG) Host cabkonvappinv FTP command: PASS
2009.11.11 at 09:19:28:165: Thread-12: (DEBUG) FTP Command: PASS, reply:
530 User cabftpt3edi cannot log in.
2009.11.11 at 09:19:28:165: Thread-12: (ERROR) Server 'cabkonvappinv' unable to login , reply code = 530
In the above log you can see we get different 331 response:
And trying from command line ftp yields:
ftp cabkonvappinv 21
331 Password required for cabftpt3edi.
ftp cabkonvappinv 2121
331 User name okay, need password.
So I am pretty sure it uses "the wrong port".
If you want I can send you the b2b log as well but here are some extracts but I have not been able to see any information about the "sending transport server" so it is not very useful:
// Michael Medin
2009.11.11 at 09:12:57:547: B2BStarter thread: B2B - (INFORMATION) oracle.tip.adapter.b2b.transport.TransportInterface:initialize: Props: ftp://cabkonvappinv//Send file.receiver.wallet_location = /etc/ORACLE/WALLETS/oracle/ewallet.p12
file.receiver.polling_interval = 60
file.receiver.path = /Send
file.receiver.marker = false
marker = false
ccc = false
file.receiver.channel_mask = None
file.receiver.minimum_age = 0
filename_format = *_%MSG_ID%.edi
file.receiver.van = false
file.sender.channel_mask = None
file.receiver.user = cabftpt3edi
PROTOCOL_ENDPOINT = null
file.receiver.password = *****
file.receiver.preserve_filename = false
transport_callout_waittime = 30
preserve_filename = false
file.receiver.control_port = 2121
file.receiver.ccc = false
van = false
polling_interval = 60
2009.11.11 at 09:19:28:154: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.msgproc.Request:outgoingRequestPostColab Calling Send to transmit the message
2009.11.11 at 09:19:28:154: Thread-12: B2B - (DEBUG) Protocol Name: FTP
2009.11.11 at 09:19:28:154: Thread-12: B2B - (DEBUG) Version Name: 1.0
2009.11.11 at 09:19:28:154: Thread-12: B2B - (DEBUG) Endpoint: ftp://cabkonvappinv//Recv
2009.11.11 at 09:19:28:155: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.transport.TransportInterface:send URL: FTP://CABKONVAPPINV//RECV
2009.11.11 at 09:19:28:155: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.transport.TransportInterface:send TO Endpoint: 506 ftp://cabkonvappinv//Recv
2009.11.11 at 09:19:28:155: Thread-12: B2B - (DEBUG)
Protocol = FTP
Version = 1.0
Transport Header
Content-Transfer-Encoding:binary
filename:GoteborgEnergi_2009Nov11_09_19_28_127.dat
ACTION_NAME:Process_EDIFACT_PRODAT_D97A
DATE:Wed, 11 Nov 2009 08:19:26 GMT
file.sender.type:BINARY
TO:CAB
DOCTYPE_NAME:PRODAT
FROM_PARTY:GoteborgEnergi
DOCTYPE_REVISION:D97A
FROM:GoteborgEnergi
MESSAGE-ID:internal_C0A8D210124E2535D6000000F899B200-1B2BIDSuffix
TO_PARTY:CAB
Connection:close
Parameters
-- listing properties --
http.sender.timeout=0
2009.11.11 at 09:19:28:166: Thread-12: B2B - (WARNING)
Message Transmission Transport Exception
Transport Error Code is 530 User cabftpt3edi cannot log in.
StackTrace oracle.tip.transport.TransportException: FTPAgent cannot login to cabkonvappinv. Check user name and password.
     at oracle.tip.transport.basic.ftp.FTPAgent.login(FTPAgent.java:580)
     at oracle.tip.transport.basic.ftp.FTPAgent.init(FTPAgent.java:614)
     at oracle.tip.transport.basic.FileSource.init(FileSource.java:189)
     at oracle.tip.transport.basic.FileSource.<init>(FileSource.java:111)
     at oracle.tip.transport.basic.FileSender.send(FileSender.java:119)
     at oracle.tip.transport.b2b.B2BTransport.send(B2BTransport.java:311)
     at oracle.tip.adapter.b2b.transport.TransportInterface.send(TransportInterface.java:1034)
     at oracle.tip.adapter.b2b.msgproc.Request.outgoingRequestPostColab(Request.java:1757)
     at oracle.tip.adapter.b2b.msgproc.Request.outgoingRequest(Request.java:975)
     at oracle.tip.adapter.b2b.engine.Engine.processOutgoingMessage(Engine.java:1167)
     at oracle.tip.adapter.b2b.data.MsgListener.onMessage(MsgListener.java:833)
     at oracle.tip.adapter.b2b.data.MsgListener.run(MsgListener.java:400)
     at java.lang.Thread.run(Thread.java:534)
2009.11.11 at 09:19:28:166: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.transport.TransportInterface:send Error in sending message
2009.11.11 at 09:19:28:166: Thread-12: B2B - (INFORMATION) oracle.tip.adapter.b2b.msgproc.Request:outgoingRequestPostColab Request Message Transmission failed
2009.11.11 at 09:19:28:166: Thread-12: B2B - (DEBUG) DBContext beginTransaction: Enter
2009.11.11 at 09:19:28:166: Thread-12: B2B - (DEBUG) DBContext beginTransaction: Transaction.begin()
2009.11.11 at 09:19:28:166: Thread-12: B2B - (DEBUG) DBContext beginTransaction: Leave
2009.11.11 at 09:19:28:166: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.msgproc.Request:outgoingRequestPostColab FTPAgent cannot login to cabkonvappinv. Check user name and password.
FTPAgent cannot login to cabkonvappinv. Check user name and password.
2009.11.11 at 09:19:28:360: Thread-12: BusinessLogicLayer - (DEBUG) Authorization disabled. UserBootstrapped:false, useAuthorization:true, configType:null
2009.11.11 at 09:19:28:360: Thread-12: BusinessLogicLayer - (DEBUG) Push Stack: updateBusinessMessage
2009.11.11 at 09:19:28:361: Thread-12: BusinessLogicLayer - (DEBUG) Pop Stack: updateBusinessMessage
2009.11.11 at 09:19:28:362: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.engine.Engine:notifyApp retry value <= 0, so sending exception to IP_IN_QUEUE
2009.11.11 at 09:19:28:370: Thread-12: B2B - (DEBUG) Engine:notifyApp Enter
2009.11.11 at 09:19:28:371: Thread-12: B2B - (DEBUG) Enqueue Engine AQJMSCorrelationID = null
2009.11.11 at 09:19:28:371: Thread-12: B2B - (DEBUG) notifyApp:notifyApp Enqueue the ip exception message:
<Exception xmlns="http://integration.oracle.com/B2B/Exception" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<correlationId>internal_C0A8D210124E2535D6000000F899B200-1B2BIDSuffix</correlationId>
<b2bMessageId>internal_C0A8D210124E2535D6000000F899B200-1B2BIDSuffix</b2bMessageId>
<errorCode>AIP-50079</errorCode>
<errorText>Transport error: FTPAgent cannot login to cabkonvappinv. Check user name and password.
FTPAgent cannot login to cabkonvappinv. Check user name and password.</errorText>
<errorDescription>
<![CDATA[Machine Info: (tsr-appint.goteborgenergi.se)
Transport error: FTPAgent cannot login to cabkonvappinv. Check user name and password.
FTPAgent cannot login to cabkonvappinv. Check user name and password. ]]>
</errorDescription>
<errorSeverity>2</errorSeverity>
</Exception>
2009.11.11 at 09:19:28:377: Thread-12: B2B - (DEBUG) Engine:notifyApp Exit
2009.11.11 at 09:19:28:377: Thread-12: B2B - (DEBUG) DBContext commit: Enter
2009.11.11 at 09:19:28:379: Thread-12: B2B - (DEBUG) DBContext commit: Transaction.commit()
2009.11.11 at 09:19:28:379: Thread-12: B2B - (DEBUG) DBContext commit: Leave
2009.11.11 at 09:19:28:379: Thread-12: B2B - (DEBUG) oracle.tip.adapter.b2b.msgproc.Request:outgoingRequest Exit
2009.11.11 at 09:19:28:380: Thread-12: B2B - (INFORMATION) oracle.tip.adapter.b2b.engine.Engine:processOutgoingMessage:
***** REQUEST MESSAGE *****
Exchange Protocol: Generic Version 1.0
Transport Protocol: FTP
Unique Message ID: GoteborgEnergi_2009Nov11_09_19_28_127.dat
Trading Partner: CAB
Message Signed: No
Payload encrypted: No
Attachment: None
***** REQUEST MESSAGE *****

Similar Messages

How do I set up my Belkin router to forward ftp port to macMini?

I am trying to set up my spare macMini (non-intel) as an ftp server, but I am not able to connect to the ftp server (office) from a remote location with my MacBook Pro (home). I have tried to make the right settings as below:
1. forwarded ports 20 and 21 on my Belkin router to the private IP of my macMini (192.168.2.15)
2. set up a dynamic dns account xxx.dyndns.org so that this domain is updated with the current public IP
3. set Sharing Preferences to allow ftp access and turned off the Firewall
I think the port forwarding info is not correct because it does connect if I use the DMZ setting and hard code the public IP to the private IP.
Any help appreciated,
Cynthia

Are you sure that your Internet Service Provider (ISP) doesn't block the ftp ports?
Is is fairly common these days for ISPs not to allow any kind of file server on ordinary household contracts.
Anyway, I'd suggest you rule that out before you get further into the intricacies of port forwarding.
I also hope that you only have the firewall turned off for the ftp ports -- or if not, that your router has firewall protection.

Should FTP port be opened for client_to_as function

I need to transfer a file from the client machine to the Solaris Server where the 10g forms are running. I was planning on using the webutil_file_transfer.client_to_as function. I know we have to set some properties in the webutil.cfg file. Other than that, should the FTP port be open on the server for the file to be transferred from the client machine. Basically, wanted to know if FTP protocols are used to transfer the file so that certain securities can be set on the server.
Also does anyone know how to delete the file on the solaris server programmatically through Oracle Forms? After the file is transferred from the client to the server and processed, I need to delete the file. I am assuming you can use the HOST command, but not sure of the exact syntax and what permissions are required to delete the file from the client machine.

I have never used the "Client_To_AS" method, however, according to the documentation all you need to configure is the webutil.cfg and insure the transfer.appsrv.enabled parameter is set to TRUE and if the transfer.appsrv.accessControl parameter is set to TRUE then you also need to ensure the target directory on the App Server is listed in the transfer.appsrv.write list. There is no mention that FTP must be enabled on the App Server.
The documentation also states that you should call the WebUtil_File_Transfer.IsASWritable function with the target file name to ensure you are able to write to the file location on the server.
As to how to delete a file, you can use the "rm <filename>" command in Solaris to remove the file. Also, here is the link to the documentation I used to reply to your post.
http://www.oracle.com/technology/products/forms/htdocs/webutil/web_util.pdf
Hope this helps.
Craig...

Using FTP port 21

I have a WRT54G2 router. I recently got a LaCie network hard drive that uses remote access (FTP) to access the hard drive. I have connected & transferred files locally but have not been able to connect remotely. LaCie support tells me that I need to get port 21 open on my router. I am not sure exactly how to do that. I have contacted my ISP (at&t) & they do not block port 21 or anything to do with FTP. Thanks so much, I'm fairly new at this stuff.

First of all, I would STRONGLY advise not opening port 21 on your router, unless you are going to do it temporarily for times you want to transfer files. Opening FTP (port 21) is like opening the door for hackers. You may find your bandwidth being used by people trying to gain access to your system....
If you MUST do it, make sure the FTP server on the network drive is secure...thoroughly research the device on community bulletin boards to find out if there any known vulnerabilities that cannot be overcome. If you STILL want to go ahead, make sure you configure it with a very strong password, that is unlikely to be cracked...there are numerous sites out there that can help you to pick a strong password.
If your FTP server in the device supports it, and you know the IP address from which you will be accessing it, see if you can restrict FTP access to only your loacal network, and any specific IPs you will be accessing it from.
Then, once you have finally decided you want to potentially allow the world to access your files, go to portforward.com, where you can find out how to set up port forwarding (opening ports) on your router.
Tomato 1.25vpn3.4 (SgtPepperKSU MOD) on a Buffalo WHR-HP-G54
D-Link DSM-320 (Wired)
Wii (Wireless) - PS3 (Wired), PSP (Wireless) - XBox360 (Wired)
SonyBDP-S360 (Wired)
Linksys NSLU2 Firmware Unslung 6.10 Beta unslung to a 2Gb thumb, w/1 Maxtor OneTouch III 200Gb
IOmega StorCenter ix2 1TB NAS
Linksys WVC54G w/FW V2.12EU
and assorted wired and wireless PCs and laptops

Connect to non standard ftp port

Hi ,
Is it possible for PI to connec to non standard ftp port to pick files using ftp adapter??
how abt non standard ftp servers?

Hi Teja,
> Is it possible for PI to connec to non standard ftp port to pick files using ftp adapter??
According to my knowledge it is possible, you have to mention that port in the communication channel.
> how abt non standard ftp servers?
Reffer the below links
http://www.nsoftware.com/kb/tutorials/biztalkftpadapter.aspx
http://wikis.sun.com/display/JavaCAPS/SunAdapterfor+Batch-FTP
Regards
Ramesh

Two FTP ports on a single solaris server

can i have two FTP ports on single Solaris server ? If yes, HOW ??

Hi adiyakiran,
This is possible in third party ftp server wu-ftpd. you can download it from http://www.sunfreeware.com.
read wu-ftpd faq URL: http://www.wu-ftpd.org/wu-ftpd-faq.html
Testing on a different port number then ftp:21
This can be done from the command line or with a special definition in /etc/services ,/etc/inetd.conf. For command-line, look up -P and -p in the ftpaccess(5) manpage.
To set up with special definitions, add 2 ports with consecutive numbers in /etc/services, and then start wu-ftpd on these ports. Add to /etc/services something like :
ftptest 4021/tcp #command port
ftptest-data 4020/tcp #data port
Then start wu-ftpd from /etc/inetd.conf like :
ftptest stream tcp nowait root /usr/etc/in.ftpd in.ftpd
The key is the name 'ftptest' which associates the port assignment in the /etc/services file to that in the inetd.conf file. Make certain the choice of ports in /etc/services (4021 and 4020 above) are from the local use list and don't conflict with other port assignments (see RFC1700, ASSIGNED NUMBERS). One important subtlety. The data
port is not really derived from the data port declaration in the /etc/services file. The FTP specification (RFC765) states the data port is defined as one less than the command port. However, including the data port declaration in the /etc/services file prevents it from being accidentally assigned to something else.
Thanks.
regards,
senthilkumar.
SUN - DTS

Arch/Pacman FTP ports

Does anyone know what ports you need to have open in the outbound direction when using pacman.
For example - on my adsl router (with builtin firewall) I typically drop all outbound conections in combination with explicitly allowing connections out to ports 20, 21, 53, 80, 443, 873 etc etc.....
Now - I can't get pacman to connect out using this configuration so I've had to temporarily allow all outbound connections through my rouiters firewall while configuring Arch and sure enough pacman now connects out and I can download arch packages.
So am just wondering, does Arch/Pacman use any "strange" ftp ports by any freak chance- not sure whether it's an issue with the active/passive thing or what - anyone have any ideas?
Thanks.

You can also use wget to download the packages instead of pacman's internal downloader. You need to uncomment the " XferCommand" line in /etc/pacman.conf
It might work in your case.

CSM not passing ACK in FTP port 1985?

We have a pair of CSM 4.1.6 in bridge mode and we have a VIP for passive ftp set. We are seeing consistent errors with FTP port 1985. We took several captures and notice that conns show ESTAB on CSM but the client sends the SYN receives the SYNACK then sends the ACK but the ack never gets to the server and this only happens on port 1985. I also looked at the capture on the server and see that the ACK never gets to the server. We try TCP ports 1984 and 1986 everything works perfectly. Has anyone seen anything like this before?
vserver PSCO_FTP---21
virtual 10.x.2.100 tcp ftp service ftp
vlan 690
serverfarm PSCO_FTP---0000
persistent rebalance
inservice
serverfarm PSCO_FTP---0000
nat server
no nat client
predictor leastconns
real 10.x.5.100
inservice
real 10.x.6.100
inservice
probe PROD-FTP
EdSw02#sh mod csm 4 conns vserver PSCO_FTP---21 det
prot vlan source destination state
In TCP 690 172.x.2.57:1985 10.x.2.100:21 ESTAB
Out TCP 691 10.x.6.100:21 172.x.2.57:1985 ESTAB
vs = PSCO_FTP---21, ftp = Control, csrp = False

Thx sadbulali, I see...but according to the tcp dumps on client and server you never see a FIN in either direction. What you do see is the client sending SYN the real gets the SYN it sends a SYN/ACK and the client then receives the SYN/ACK then the client proceeds to send the ACK which never reaches the real server...And it seems to be stopping at the CSM.

Detecting an event at ftp port

Hello,
I am writing a program that is supposed to detect when a file has arrived through an ftp port to a certain folder, and process it upon detection.
Would it be appropriate to use a SocketServer on port 21 for this scenario?
If not, do you have any pointers which way to go?
TIA,
Selma

Nope.
If an FTP server is running on a computer on port 21, you will not be able to create a ServerSocket on that port (since it's already in use). Operating systems limit one thing listening per port. That's the way they are intended to work.
As for an alternative solution...
You can get a directory listing every x minutes and check for differences.... shrug
Maybe other people have better solutions.

AirPort Extreme FTP port is open when doing Remote Port Scan

I have a question regarding the AirPort Extreme Base stations running firmware 7.7.3. Currently the AirPort is not port-mapping any services, however when I do a remote port scan of that particular AirPort I have noticed some TCP ports are open from the outside, such as FTP port 21, RTSP port 554 and ARCP port 7070. Why is that? I thought the AEBS blocks these services by default, unless otherwise configured to be open. Is this a vulnerability with the firmware?

TCP and UDP ports used by Apple software products - Apple Support
Your 554 and 7070 may be open due to links to itunes store. It is not a big vulnerability since it is for streaming.
Port 21 is more a concern.. It is used internally by the AE apparently.. but I really do not know why. FTP as a protocol is not offered to the outside world. so you cannot connect to it and get info for files.. even if you have a hard disk plugged in. Why it should be open to the outside world I am not sure.
Do you have BTMM turned on? It may be involved with remote services.
If you are concerned it is not hard to fix.. port map those ports to a non-existent client in the network.. however your itunes store connection might stop working as well as some other things... that need those ports open.. There is also a good chance you cannot map them when they are used.. so do a factory reset and before you setup other applications or BTMM do the port map and see what happens.
You can also post the details to apple directly but I honestly doubt you are facing any big issues here.

FTP Port from 21 to 211

Greetings,
I have an:
Xserve
2x 2GHz Dual-Core Intel Xeon
2GB 667 MHz FB-DIMM
Trying to reconfigure the FTP port from 21 to 211 (or any other, except 21).
How do I tell the Xserve to listen for that particular port for FTP instead of 21?
I already forwarded the port 211 to the IP address assigned to the Xserve.
Thank you.

First let me preface this by saying I think this is a really bad idea.
There are two common reasons for using non-standard ports for services. One is to circumvent network filters (such as those imposed by an ISP), the other is to hide the fact you're running a particular server.
In the former, there are usually easier ways to overcome that, for example, port forwarding at the router, tunneling over SSH or a VPN, or using a different protocol SFTP, for example.
In the latter you're largely wasting your time since any serious hacker isn't trying any particular port to get into your machine, they run a port scan and analyze whatever responds. Any worthy hacker (is that a legitimate term? ) will know almost immediately what kind of service is running on any given port.
In addition to all of that, FTP is a major PITA due to its use of multiple ports. While you may use port x for the FTP control connection, you typically use port x-1 for the data connection, meaning you need to open port 210 as well as 211.
Then comes the future. Running non-standard ports requires that you remember the changes and re-apply them after any future updates - Apple have a habit of updating files they don't expect users to change and you may find that FTP reverts to a standard port without you realizing.
That said, FTP's main control file is /System/Library/LaunchDaemons/ftp.plist.
In there you'll find the part that tells FTP which network ports to listen to:
<key>Sockets</key>
<dict>
  <key>Listeners</key>
  <dict>
   <key>SockServiceName</key>
   <string>ftp</string>
   <key>Bonjour</key>
   <true/>
  </dict>
</dict>
The SockServiceName is the relevant part - in this case it tells the daemon to listen on the 'ftp' port.
At this point you have two options - either tell it to use a different port, or redefine what 'ftp' relates to.
In the first option, I think (but haven't confirmed) you can just change the <string>ftp</string> with an alternate port number, e.g.:
   <key>SockServiceName</key>
   <string>211</string>
The other option is to edit the file /etc/services (which is where the daemon looks up the port names) and redefine the ftp port number:
ftp 21/udp # File Transfer [Control]
ftp 21/tcp # File Transfer [Control]
Change both these numbers to 22. You may also need to change the 'ftp-data' ports listed immediately above in the file.
As mentioned before, whichever option you choose (.plist or /etc/services) you should be prepared to re-apply the change if Apple overwrites them.
If you're running a firewall you will also need to edit your firewall rules to match the new port numbers.

Changing Application that uses FTP port 21

We have a Windows server that uses an OCR software that allows our printers to scan documents to our Mountain Lion server to a document management application (at least thats what we are trying to do). The problem is that the OCR software is sending it to an FTP share but will not let you specify the FTP port number. By default Mac uses port 21 and I know how to change that port to something else. I just need to know if there is a way to let another application take control of port 21?

Sure. Shut off the ftp server on the target system.
At most there can be one application listening to a particular TCP port. If you don't want that to be ftp, shut it off.
But I'd tend to doubt that'll help, here.
I'd be interested in learning a little more about how this OCR tool works and how this file transfer supposedly happens, as ftp is a paragon of insecurity and also largely incompatible with modern network security and firewalls, but this particular request for a changed-port seems quite unexpected.
The identity of the OCR software might help, as a look at the documentation would be interesting, too.

Time Capsule Does Not Port Forward FTP Ports

Hey there,
I recently purchased a Time Capsule, and I found out that while it fixes the NAT-PMP bug found in my previous AirPort Extreme Base Station (Gigabit-N), it introduces a new problem which makes it refuse to forward port 21 properly.
It seems to me that the Time Capsule has some sort of FTP server built in, and is either enabled but closes connection on client connection, or disabled but still listens for client connection.
This message is what I get when I connect to my IP via FTP from the WAN side (FTP port forwarded to a local machine with an IP 10.0.0.8):
421 Service not available, remote server has closed connection.
When it is accessed from the LAN of course, I can connect to 10.0.0.8 with no problem. However, what is interesting is if I connect to the Time Capsule via FTP I get this as well:
421 Service not available, remote server has closed connection.
Thus, I am 100% certain that the FTP message I see when I connect from WAN is from the Time Capsule instead of the machine I port forwarded to.
Apple needs to fix this annoying problem and at the same time fixes some VPN issues I'm having with my Nortel VPN client (4.68). It was all working when I had the AirPort Extreme Base Station.

I am having a problem establishing an FTP session that is started with my FTP Client (CuteFTP) on my local network and attempting to connect to an FTP Server with one of my hosting providers. My first few attempts used FTPS (Secure FTP) as that is what I typically use when transferring FTP packets over the net. Well, this didn't work so I thought maybe the Time Capsule had a problem inspecting the encrypted packets so I switched to standard clear-text FTP just to see if the Time Capsule handles FTP session management functions correctly. This didn't work either. I'm using PASV FTP and have never had a problem before with my CISCO Router or with another consumer-based NAT router. I don't believe that the Server on the Internet gets the initial request on port 21 as I believe the Time Capsule is not allowing the packet to pass and my FTP Client spits back an error message : "Couldn't access FTP service " "Connection Failed". I have also used "Terminal" and initiated the ftp utility and attempted to connect to the same server and receive the following error message : "421 Service not available, remote server has closed connection.". I have attempted to put my computer in the DMZ by using the Default Host feature on the Time Capsule but that resulted in the same errors. I believe that I have tried most of the settings available on the Time Capsule to attempt to get this to work but no luck yet. If the packet is getting through to the server and the response back on the current ephemeral port is not getting through the Time Capsule I'm really hoping the solution is not having to port map all ephemeral ports as this is in the tens of thousands. Has anyone successfully established an FTP Session (Secure or Not) from your local client through the Time Capsule to a Server on the Internet. If so, could you help by providing any Time Capsule settings that were required for this to function properly....Thanks in Advance.
Note: I have attempted to ftp to several different public ftp servers on the Internet and get the same error results. I have no problems ftping to local serverson my local network.

FTP ports necessary

I am having trouble figuring out FTP ports necessary to
publish on the web server. If I open the firewall to allow anything
Contribute works just fine. If I just specify FTP (20-21) and HTTP
(80) it bombs out and tells me access is denied and that there is a
permissions problem.
I've reset the Contribute password, recreated the website,
everything I could think of. I'm so mad and frustrated.
I can't leave the firewall open like that. Any one have any
clues?

I'm afraid I don't know the exact answer, but this article:
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_19534
Mentions ports related to Contribute Publishing Services.
Rgds
lukaro

Passive FTP Port Range -- Server 10.3.x Panther

I know that the port range for Passive FTP is >1024, but I want to define that to a smaller group of unused ports so that I can specify that those ports are open in the Firewall.
Can, how, and where do I define this port range??

I just opened from 13658-65534 and this seems to be fine (although not been running very long). I took the view that opening a stack of ports was not really any worse than just opening a quarter as much. Arguably, it's no worse than just opening one.
However, we only use it from time to time and FTP services is off unless specifically required. If I was going to run it for serious use I think I would put it on a dedicated server and put it in a DMZ.
Reading up on FTP security is on my To-Do list...
-david
[EDIT] The server is also well locked down for SSH.

FTP port?

Similar Messages

Maybe you are looking for