Welcome Guest ( Log In | Register )



 
Reply to this topicStart new topic
> Active Versus Passive Ftp
dserban
post Jun 20 2007, 11:19 AM
Post #1


Premium Member
Group Icon

Group: [HOSTED]
Posts: 286
Joined: 17-June 07
Member No.: 22,702



Sometimes when you try to connect to an FTP server using various types of FTP clients, some of these clients will work, while others won't.
In order to understand why, you need to know a little bit more about the internal workings of the FTP protocol.

The FTP handshake can work in two very different manners:
1. active mode
2. passive mode

A fairly technical explanation can be found here:
http://slacksite.com/other/ftp.html

Basically, the difference is that in active mode, both the server as well as the client will be required to open up ports to listen for incoming traffic.
This will cause problems if you are behind a firewall / NAT router. The most visible symptom is that your FTP client will cause the bult-in Windows XP SP2 firewall to pop up a dilog box informing you that the client is trying to open an inbound connection and asking you whether you want to unblock or keep blocking.

Some of the smarter FTP clients have a checkmark option or command line switch to enable passive mode for all FTP transfers.
In passive mode, only the server is required to open up ports for incoming traffic.
All browsers are by default configured to work in passive mode when used as FTP clients.
If you are behind a firewall / NAT router, passive mode gives you a better chance of connecting to an external FTP server.
Go to the top of the page
 
+Quote Post
FirefoxRocks
post Jun 21 2007, 12:57 PM
Post #2


Super Member
Group Icon

Group: [HOSTED]
Posts: 639
Joined: 12-July 06
From: Ontario, Canada
Member No.: 14,464



I always use passive mode with any FTP settings that I configure. Active mode is slower (if it actually works).
Could you explain some advantages of using active mode with FTP? Seems unnecessary to do so, but I may be wrong.
Go to the top of the page
 
+Quote Post
ethergeek
post Jun 21 2007, 04:34 PM
Post #3


Premium Member
Group Icon

Group: [HOSTED]
Posts: 393
Joined: 9-March 07
From: Tucson, AZ
Member No.: 20,794



Given that most of your users are behind firewalls, and the major platform vendors are switching to a more secure default setup with a hardened firewall, I would always configure an FTPd to support passive mode.
Go to the top of the page
 
+Quote Post
Alegis
post Jun 22 2007, 01:55 PM
Post #4


Premium Member
Group Icon

Group: Members
Posts: 300
Joined: 25-May 06
Member No.: 13,654



As I understand it, some servers require the client to be in active mode - rendering it not entirely a client side choice.
Never bothered to understand the difference, just switched to active when this was necessary. Thanks for clearing that up.

People who have troubles with ports on their NAT/router should visit http://www.portforward.com for an easy introduction on port forwarding and a guide for almost each router model.
Go to the top of the page
 
+Quote Post
dserban
post Jun 22 2007, 03:53 PM
Post #5


Premium Member
Group Icon

Group: [HOSTED]
Posts: 286
Joined: 17-June 07
Member No.: 22,702



QUOTE(FirefoxRocks @ Jun 21 2007, 01:57 PM) *
Could you explain some advantages of using active mode with FTP?


Active mode is the legacy way of doing things. It is the way the FTP protocol was designed to work way back when the Internet was a small, friendly community of scientists, students, etc. Nobody called it active mode in those days because there was nothing to compare and contrast it with.
Passive mode was designed later as an alternative, when hackers became a real and constant threat.

The only advantage of active mode that I can think of is backwards compatibility.
For example, if a large corporation runs a big old mainframe with an FTP server that doesn't do passive mode and only needs to be available to FTP clients on the intranet.

I recently installed the FileZilla FTP server on my PC and, in order to get it to work, I not only had to forward the ports / port ranges for the control and data connections in order to get it to work in passive mode, but I also had to make my PC the default DMZ server in the router configuration, which now could make my PC somewhat more vulnerable, if I'm not careful.

So that would be another advantage of active mode - less vulnerability on the server side.
Go to the top of the page
 
+Quote Post
iGuest
post Dec 19 2007, 09:10 PM
Post #6


Newbie [ Level 1 ]
Group Icon

Group: Members
Posts: 0
Joined: 1-November 07
Member No.: 25,869



I need a script to set the "enable passive ftp" setting in internet explorer to enable. I am NOT a software person so while it might be easy to layout , to me it is GREEK :)

The default in IE7 is to NOT enable it and this is creating a problem for me to "explain" to people who are even worse off than I on how to simply go in and put a "check" in that box.

Thanks
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

Collapse

> Similar Topics

Topics Topics
  1. About Staying Active...(8)
  2. Nothing To See Here.(3)
  3. Not Being Active For A While(5)
  4. Intel Active Monitor Indicating Voltage Problem(0)
  5. Remaining Active?(2)
  6. Python Versus Java ?(4)
  7. Get Rid Of Stupid Flash Active X Warning(0)
  8. Gfx Cards. Price Versus Value.(2)
  9. Active Desktop Tips(0)
  10. Firefox On Os X Versus Safari(11)
  11. Any Active & Regular Vietnamese Member At Astahost ?(3)
  12. Questions On PHP Versus Perl-CGI(4)
  13. Highlight The Active Text Input Fields.(1)
  14. Problem In Theme Or Active Object!(4)
  15. Lightweight Directory Access Protocol (ldap)(0)


 



- Lo-Fi Version Time is now: 22nd August 2008 - 05:37 AM