Quantcast
Channel: FileZilla Forums
Viewing all 11475 articles
Browse latest View live
↧

Re: Security

March 12, 2013, 7:34 am
$
0
0
Wrong. In order for a password to be sent to the server it has to be decrypted in memory on that machine first. FTP over TLS/SSL only protects against man-in-the-middle-attacks, it provides no endpoint protection. Malware on a machine is able to do anything the user account it runs under is. FileZilla runs under your user account. As soon as the passwords are entered or decrypted the malware grabs them from memory. Easy as pie.

Any system that has or had a malware on it must be regarded as being compromised!
↧
Search

SFTP Public Key pass phrase Authentication Glitch, but works

March 12, 2013, 8:12 am
$
0
0
I setup a public key with passphrase via puttys keygen & its working with Putty directly to my Ubuntu OpenSSH server. I then tried to add private key (.ppk file) to filezilla & it stated password protected keyfiles are not supported yet, prompted to convert to unprotected file, I said no. Today I went to connect with normal password & got the below:
Code:
Status:   Connecting to lnx...
Trace:   Going to execute "C:\Program Files (x86)\FileZilla FTP Client\fzsftp.exe"
Response:   fzSftp started
Trace:   CSftpControlSocket::ConnectParseResponse(fzSftp started)
Trace:   CSftpControlSocket::SendNextCommand()
Trace:   CSftpControlSocket::ConnectSend()
Command:   open "gregg@lnx" 22
Trace:   psftp: Implicit session load.
Trace:   psftp: Host still has atsign: gregg@lnx
Trace:   Looking up host "lnx"
Trace:   Connecting to 192.168.1.118 port 22
Trace:   Server version: SSH-2.0-OpenSSH...
Trace:   Using SSH protocol version 2
Trace:   We claim version: SSH-2.0-PuTTY_Local:_Nov_29_2012_22:59:17
Trace:   Doing Diffie-Hellman group exchange
Trace:   Doing Diffie-Hellman key exchange with hash SHA-256
Trace:   Host key fingerprint is:
Trace:   ssh-rsa 2048 9f:5c:d6:34:f8:05:6b:db:19:e7:3d:b2:18:d5:98:f9
Trace:   Initialised AES-256 SDCTR client->server encryption
Trace:   Initialised HMAC-SHA1 client->server MAC algorithm
Trace:   Initialised AES-256 SDCTR server->client encryption
Trace:   Initialised HMAC-SHA1 server->client MAC algorithm
Trace:   Reading private key file "C:\CreatedForlnx.ppk"
Trace:   Offered public key
Trace:   Offer of public key accepted
Command:   Pass: *********
Error:   Authentication failed.
Trace:   CSftpControlSocket::ResetOperation(1094)
Trace:   CControlSocket::ResetOperation(1094)
Error:   Critical error
Error:   Could not connect to server

It's still trying to connect via public key. I downloaded psftp by itself to another directory & when trying to connect with just mcfarl@lnx it auto-prompted for key passphrase. Assume its auto-loading this info from the registry. I am posting this here to see if anyone else can test; because I would think they need to look at their code when you hit no it shouldn't do this. Or maybe my test with putty at first caused this?

Anyhow cool side effect: I found filezilla CAN accept passphrases/password-protected key files, as I put my passphrase for the private key in the password box & it accepts it & allows me in (I verified in the auth.log on ubuntu it took publickey)!!
I'm running Win7 64bit FileZilla 3.6.0.2
↧
↧

Re: SFTP Public Key pass phrase Authentication Glitch, but w

March 12, 2013, 8:50 am
$
0
0
PuTTYGen writes the values into the registry:

HKEY_CURRENT_USER\\Software\\SimonTatham\\PuTTY\\SshHostKeys

Check if the info of yours is still there.
↧

Large File Upload EBCONNABORTED after 7200 seconds (2 hours)

March 12, 2013, 10:12 am
$
0
0
I've been able to transfer basic files, the problem occurs when I try to transmit a large file (10GB). It is fails after 7200 seconds. I've seen this noted on other threads but no clear solution - if one exists.

I've tried the following:
Sending the FTP keep-alive commands
Setting transfer type to Binary
file type is .bak.gpg which isn't listed under the automatic file type classification which shouldn't matter since the default transfer type is binary. Both checkboxes (Treat files w/o extensions & dotfiles) are checked
Sending via an FTP connection via a browser (successful)

Below is my
[list=]Version info
Results from network config wizard
Log results[/list]

FileZilla Client
----------------
Version: 3.6.0.2

Build information:
Compiled for: i586-pc-mingw32msvc
Compiled on: x86_64-unknown-linux-gnu
Build date: 2012-11-29
Compiled with: i586-mingw32msvc-gcc (GCC) 4.2.1-sjlj (mingw32-2)
Compiler flags: -g -O2 -Wall -g -fexceptions

Linked against:
wxWidgets: 2.8.12
GnuTLS: 3.1.4
SQLite: 3.7.6.2

Operating system:
Name: Windows NT 6.1 (build 7601, Service Pack 1)
Version: 6.1
Platform: 64 bit system

Network Config Wizard
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.6.0.2
Response: 230 logged on.
Checking for correct external IP address
IP <external IP>
Response: 200 OK
PREP 62940
Response: 200 Using port 62940, data token 1145447613
PORT <external IP>,245,220
Connection closed

Results state that connection with server go closed prematurely.

Log Results
07:14:29 Status: Disconnected from server
07:14:29 Status: Resolving address of <host>
07:14:29 Status: Connecting to <server>:21...
07:14:29 Status: Connection established, waiting for welcome message...
07:14:29 Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
07:14:29 Response: 220-You are user number 81 of 800 allowed.
07:14:29 Response: 220-Local time is now 06:14. Server port: 21.
07:14:29 Response: 220-This is a private system - No anonymous login
07:14:29 Response: 220 You will be disconnected after 15 minutes of inactivity.
07:14:29 Command: USER <user>@<host>
07:14:29 Response: 331 User <user>@<host> OK. Password required
07:14:29 Command: PASS **********
07:14:29 Response: 230-User <user>@<host> has group access to: <home dir>
07:14:29 Response: 230 OK. Current directory is /users/<user>%<host>
07:14:29 Command: OPTS UTF8 ON
07:14:29 Response: 200 OK, UTF-8 enabled
07:14:29 Status: Connected
07:14:29 Status: Retrieving directory listing...
07:14:29 Command: PWD
07:14:29 Response: 257 "/users/<user>%<host>" is your current location
07:14:29 Status: Directory listing successful
07:14:36 Status: Resolving address of <host>
07:14:36 Status: Connecting to <server>:21...
07:14:36 Status: Connection established, waiting for welcome message...
07:14:36 Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
07:14:36 Response: 220-You are user number 83 of 800 allowed.
07:14:36 Response: 220-Local time is now 06:14. Server port: 21.
07:14:36 Response: 220-This is a private system - No anonymous login
07:14:36 Response: 220 You will be disconnected after 15 minutes of inactivity.
07:14:36 Command: USER <user>@<host>
07:14:36 Response: 331 User <user>@<host> OK. Password required
07:14:36 Command: PASS **********
07:14:36 Response: 230-User <user>@<host> has group access to: <home dir>
07:14:36 Response: 230 OK. Current directory is /users/<user>%<host>
07:14:36 Command: OPTS UTF8 ON
07:14:36 Response: 200 OK, UTF-8 enabled
07:14:36 Status: Connected
07:14:36 Status: Starting upload of <target dir>\<target file>
07:14:36 Command: CWD /users/<user>%<host>/Home
07:14:36 Response: 250 OK. Current directory is /users/<user>%<host>/Home
07:14:36 Command: PWD
07:14:36 Response: 257 "/users/<user>%<host>/Home" is your current location
07:14:36 Command: TYPE I
07:14:36 Response: 200 TYPE is now 8-bit binary
07:14:36 Command: PASV
07:14:36 Response: 227 Entering Passive Mode (xxx, xxx, xxx, xxx,195,150)
07:14:36 Command: STOR <target file>
07:14:36 Response: 150 Accepted data connection
07:14:45 Status: Retrieving directory listing...
07:14:45 Command: CWD /users/<user>%<host>/Home
07:14:45 Response: 250 OK. Current directory is /users/<user>%<host>/Home
07:14:45 Command: TYPE I
07:14:45 Response: 200 TYPE is now 8-bit binary
07:14:45 Command: PASV
07:14:45 Response: 227 Entering Passive Mode (xxx, xxx, xxx, xxx,231,249)
07:14:45 Command: MLSD
07:14:45 Response: 150 Accepted data connection
07:14:45 Response: 226-Options: -a -l
07:14:45 Response: 226 3 matches total
07:14:45 Status: Directory listing successful
07:29:45 Response: 421 Timeout - try typing a little faster next time
07:29:45 Error: Connection closed by server
09:14:36 Error: Disconnected from server: ECONNABORTED - Connection aborted
09:14:36 Error: File transfer failed after transferring 3,126,460,416 bytes in 7200 seconds

Thanks.
↧

Re: SFTP Public Key pass phrase Authentication Glitch, but w

March 12, 2013, 10:33 am
$
0
0
That is for the HOST keys (the initial/first connection to a server, its to validate the integrity of the server by the client). However you indeed got mostly there, only under Sessions, lnx (hostname), there is PublicKeyFile (a REG_SZ/String Value) with the data being the path to the private key (odd name). I deleted this entry, then tried filezilla & did get in with the password; did this twice for consistency. I then went into settings like I had before, attempted to add private key, same message about password-protected files not supported, I hit no. Refreshed registry & it wasn't there, tried to login with password again, it worked. Then went into putty & setup private key again & indeed if you save the session that key gets created in registry

Long story short: indeed its putty that creates this key

However I would hope somewhere in the FileZilla documentation it would note that it scans registry for this info & uses its. As I understand it uses a modified psftp, so you can't necessary assume it does this like the original psftp. Furthermore the general error was not informative: critical error (had to turn debug on) & confusing. Cool little side effect that I am curious if people are aware of: it can use password (or as its formally noted: pass-phrase) protected private key files (for public key authentication); just a back-route method way of it
↧
↧

Re: Help?!?! 421 Proxy is closed

March 13, 2013, 3:13 pm
$
0
0
Quick guess: Company gateway proxy, could be at either side. Net admins sometimes tend to forget about that extra surprise.
↧

Re: Windows 8 compadibility

March 13, 2013, 3:18 pm
$
0
0
Quick thing to check: PDF documents are binary files and must be transferred as such. Transferring them as ASCII destroys the PDF code.
↧

Re: Windows 8 issue: how to open ftp:// clickable links in F

March 13, 2013, 3:27 pm
$
0
0
I tried, without extensive registry-fu it's pretty much impossible now. In the name of making it easier for John and Jane Doe, extended association functionality went downhill beginning with Vista (along with the disappearance of the tab in Folder options). They may have restricted it even further or may have removed that functionality altogether because it clashes with ''Modern'' UI.

In case you want to try, the registry key should be

HKEY_CLASSES_ROOT\ftp
↧
Search

Re: Having trouble connecting

March 13, 2013, 3:46 pm
$
0
0
I am not too swift when it comes to this stuff... I am just a newbie. I read the configuration thing...what part pertains to my situation?
↧
↧

Re: Having trouble connecting

March 13, 2013, 4:57 pm
↧

Conflicted copy html files on my computer

March 13, 2013, 5:00 pm
$
0
0
Good evening, FileZillers...

I had computer glitch and now I have four of my website files on my computer that have copies of the original files names appended with the name of my computer followed by "conflicted copy 2013-03-02".html. They are newer that the server files. Should I simply rename them and overwrite the existing ones and then upload them to the server or is there some way special I should handle this?

Thanks for your time and patience! :oops:
↧

Can't Delete...

March 13, 2013, 8:50 pm
$
0
0
Response: 550 auto.html: The media is write protected.

Just upgraded to new version of FileZilla.

Help!
↧

New image not showing up

March 13, 2013, 10:53 pm
$
0
0
I use Yahoo small business. I tried to update to FTPS per Yahoo's request. After the update, it wouldn't allow me to connect with the server when I typed the info. So, instead, I clicked the Site Manager on FileZilla, and found "New Site". So, I clicked "Connect". Then, it connected me to the server without inputting all other information, such as user's name, password, etc. And I was able to upload my image last couple times. However, when I did the same thing again today uploading a new image by clicking the Site Manager, etc., this time the image did not show up on any browser. Why it wouldn't work this time while it worked last couple times? I did notice when I dragged the new image to replace the old image this time, instead of over-writing the old image like it did before, this time, it created the new image next to the old image. Thank you and I look forward to any feed-back and help.
↧
↧

how to get a list of all the directories and subdirectories

March 13, 2013, 11:46 pm
$
0
0
Hi,

Could someone please let me know if there is a way to list all the directories, subdirectories and files when one is connected to the server via filezilla?

Copy urls to clipboard gives me the list of only the directory i am in.

Thanks
↧

Re: New image not showing up

March 13, 2013, 11:53 pm
$
0
0
A case of character case maybe? Many servers are case-sensitive.
↧
Search

Re: how to get a list of all the directories and subdirector

March 13, 2013, 11:56 pm
↧

Re: Windows 8 issue: how to open ftp:// clickable links in F

March 13, 2013, 11:57 pm
$
0
0
Actually, associations got a lot easier since Vista, the problem is that they didn't remove any of the previous ways to handle associations. Right now, associations can be setup in a dozen different ways in the registry.
↧
↧

Re: Can't Delete...

March 13, 2013, 11:58 pm
$
0
0
That message comes from the server. Contact your server administrator or server hosting provider for assistance.
↧

Re: Conflicted copy html files on my computer

March 14, 2013, 12:03 am
$
0
0
This depends on what is on those conflicting files. Whether it is save to delete those files should be in the documentation of the program that created them.
↧

error 'Can't connect to proxy server'

March 14, 2013, 1:34 am
$
0
0
Dear all,

Could you please advise how to solve the error 'Can't connect to proxy server'?

Should the LAN settings be set as "Use a proxy server for your LAN" with ticking the "bypass proxy server" option? This error popped up while having the "Use automatic configuration script" ticked.

Or might the problem be somewhere else?

Thanks,
Eva
↧
Viewing all 11475 articles
Browse latest View live
Search