المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : اف تي بي FTP للسي بانال Cpanel حل مشكلة عدم عمل TLS/SSL Explicit encryption



Rise Company
12-06-2020, 22:22
اف تي بي FTP للسي بانال Cpanel حل مشكلة عدم عمل TLS/SSL Explicit encryption
How to enable explicit FTP over TLS login?How to switch to implicit FTPS?
How to Open Ports for Passive FTP in CSF (Configserver Firewall & Security)
FTP Passive Mode Issue In WHM/Cpanel With CSF
How to enable passive mode?

https://www.rise.company/upload/uploads/159199417533831.png


Timeout detected. (data connection)Could not retrieve directory listingError listing directory '/'.

سبب المشكلة هو وجود فايروول على السيرفر يمنع الـ ports الخاصة بـ Passive Mode

وهذه ports هي المتعارف عليها من Cpanel هي 49152:65534

كل ما عليك فعله هو السماح لها داخل firewall

----------------------------------------------------
فايروول CSF - السماح بمنافذ Passive mode
----------------------------------------------------

ابحث عن TCPIN وقم بوضع فى اخر السطر فاصل ثم 49152:65534

https://www.rise.company/upload/uploads/15919953329191.jpg

----------------------------------------------------
شرحActive and passive mode sessions
----------------------------------------------------

FTP uses a data port and a command port to transfer information between a client and a server. During a typical active mode session, the command port uses port 21 and the data port uses port 20. When you use a passive mode session, however, the data port does not always use port 20.

Active

In active mode, the FTP server responds to the connection attempt and returns a connection request from a different port to the FTP client. Network Address Translation (NAT) configurations block this connection request.

https://www.rise.company/forum/images/imported/2020/06/22.png
Active FTP
https://www.rise.company/forum/images/imported/2020/06/23.png
Active FTP (with firewall)
The firewall blocks the server’s attempt to communicate with the client because the server uses a different port than the first connection.

Passive

In passive mode, the FTP client initiates both connection attempts. NAT configurations do not block this connection request.
https://www.rise.company/forum/images/imported/2020/06/24.png
Passive FTP (with firewall)
The firewall does not block the server’s attempt to communicate with the client because the client initiated the communication both times.
Note:
If FTP users exist on the private network side of a NAT configuration, you must enable FTP’s passive mode, and open the passive port range in your FTP server’s configuration file. You may also need to open the passive port range on your firewall.


المرجع:
https://docs.cpanel.net/knowledge-base/ftp/how-to-enable-ftp-passive-mode/
https://www.ndchost.com/wiki/guides/how-to-open-ports-for-passive-ftp-in-csf-on-cpanel