Cannon connect via FTP

Hello. Please a help. Suddenly I can’t connect via ftp, I get this error. What should I look at?

Webmin version 2.202 Usermin version 2.102
Virtualmin version 7.20.2
Ubuntu Linux 22.04.4

ftp

you say — suddenly — when did it last work?

and what has changed since then – did you do any updates for instance?

any chance your hosting provider made changes to anything – FTP as may you know uses both port 21 and port 20

If you’re using active FTP, it also needs a big range of high ports. (But, I recommend against using active FTP, probably better to use FTP-over-ssh on port 2222, or passive FTP with SSL/TLS if you really must use the traditional FTP protocol.)

OP is using unencrypted FTP, which is a security disaster.

1 Like

I don’t know when the problem started, a few days ago I did updates that it had pulled out in the control panel. Are you saying I should use the SFTP protocol for better security?

I am saying your screenshot shows an unencrypted (plain) FTP connection. That is insecure.

Yes, I understand what you say about security, but I don’t understand why you can’t do anything that gives this error.

because the error is not with or due to Virtualmin it is in the way you are using FTP (insecurely).

Are you expecting Virtualmin or any server to let you (or anyone else in the world) to be able to access the internal operations ?

have you tried with port 2222? Also what is Cannon connect?

Can not connect I guess

1 Like

Sorry, before when ftp was ok I had configured it (SFTP) and it was ok. When he got the error I changed it to ftp for testing to see if it works and nothing. Me I didn’t make any changes on the server, the host (contabo) didn’t, so how did it break? Could an update from virtualmin?? be to If you don’t help me, who could?

Virtualmin is not the FTP server. Obviously updating Virtualmin cannot effect FTP. ProFTPd is the FTP server.

“ECONNABORTED” seems likely to be a network issue, maybe a router or firewall that isn’t handling FTP correctly. You could check the ProFTPd log for more clues, the client almost never knows anything useful.

I would recommend you simply not use the FTP protocol. ProFTPd is also configured to offer SFTP (FTP over ssh) on port 2222, and most modern FTP clients support SFTP (not this is not the same as FTPS, which is FTP over an SSL/TLS tunnel), so just connect to that instead, and stop screwing around with a cranky 50 year old protocol.

Perhaps we should just enforce TLS by using the TLSRequired on option in the Virtualmin installer?

2 Likes

If ftp is not secure, maybe you should remove it as an option from virtualalmin? I solved the problem with WinSCP.

I think this would be a valid thing in 2024, the user can always turn it off if there is a real need. I am sure I got Jamie to add this option into webmin but would be work checking.

A patch was made as follows, but it is not working for me yet. I have updated the GitHub ticket.