Thanks for the reply. However FileZilla never connected completely to display a directory prompt where I can actually take an action. And, there is not 20 seconds of inactivity from the time that the ‘retrieving directory’ message. it is more like 5 seconds. I would provide some activity if there was in fact something I can do. Without a remote directory displayed there is no action I can take. And, the second example, where there are actual progress messages are displayed, only happens 1 in 20 attempts. All other attempts are like the first…just a timeout.
Before this problem started, and I connected, I would get the standard htdocs directory. I could then manage the files. If there were a couple of minutes of inactivity and I did something with the files FileZilla would promptly reconnect and I can go on about my work.
With every other ftp site I tested this is standard behavior. It is only with ftpupload.net that the connection process never fully completes to display a directory in FileZilla.
Thanks for sharing, but the output you shared here shows a very different error than what you showed before, and even different what what I understood was the issue before you started sharing logs.
What you see here is that the initial connection to the FTP server is successful (you can tell by the “Response: 220” lines). But after the connection is setup, FileZilla tries to setup the secure connection, but the secure connection fails to be setup, and the FTP connections breaks.
Failure to receive a reply to the AUTH command is almost always the result of a malicious firewall actively sabotaging the connection.
Once again, this firewall might be specifically targeting the FTP connection to our servers. Being able to connect to other FTP servers doesn’t prove that the issue is caused by a problem with our FTP server.
To me this just confirms everything I wrote before.
Thanks for the additional info.
The article you referred to, from what I can read, is more related to issues with a problematic ftp server, not necessarily the ftp client (FileZilla).
Please test the server with the https://ftptest.net site (FTPS Explicit profile). My guess is that the server does only have weak ciphers enabled that FileZilla does not support, anymore.
The other client either does not use FTPS Explicit by default (thus no AUTH TLS), or it agrees on weak ciphers “for compatibility reasons”). Both cases are equally terrifying.
I have tested with 6 other ftp servers with no problems using FileZilla. The only site with problems is ftpupload.net.
If there is a problem with a malicious firewall/router/etc between my VPN gateway and ftpupload.net, then maybe ftpupload.net specifically has been flagged for a specific blocking rule? As noted, there are no issues with any other ftp site and FileZilla.
It’s quite possible, yes. Occasionally various safety filters and blocklists will mistakenly add the free hosting infrastructure and related domains as being “harmful”, though it’s always a false positive.
EdwardHamHam, thanks very much for the feedback. That makes sense.
I assumed this was the case when this problem first started several weeks ago, and that my ISP was blocking ftpupload.net. Based upon that, I have tried 2 different VPN providers (NordVPN and ProtonVPN) but I’ve not been able to fully connect to ftpupload.net with either solution. I can connect to many other ftp sites, just not ftpupload.net.
If this is the case, that ftpupload.net has/is being specifically blocked by a number of different routers/firewalls/etc on the big bad Internets, then it appears a solution might be to start searching for a VPN server hub that might have a path to ftpuload.net that is not being actively blocked. Or, just find a different web hosting solution if the world has it in for ftpupload.net. I was on SiteGround for many, many years and never had a problem with ftp and FileZilla/RapidWeaver. I was just unable to afford their price increases for my limited needs.
EdwardHamHam, here’s some interesting trivia. According to Sophoslabs, the ftpupload.net site has certificate problems and the TLS certificate appears to be invalid. I can’t vouch for the accuracy of this determination, but it might somewhat explain some of the tls errors I’ve been receiving, and why many folks appear to have problems with ftpupload.net .
EdwardHamHam, in addition, here’s another peek at how others view ftpupload.net . There may be some users/sites on InfinityFree that are causing these issues that lead to the flagging. Are they valid concerns? I’m assuming that an Internet router or hub that uses those sites services would block ftpupload.net, right or wrong.
It appears that Avira.com has ftpupload.net on a threat list, right or wrong. Any entity that uses Avira services to define online threats will block access to that site. I believe that’s what is happening in this instance. It was something that happened 10 days ago (probably from my ISP), as I had no problems before that. I applied to Avira for a ‘suspected false positive (not malware)’ exclusion for ftpupload.net, but I have doubts I will be successful. That suspicion is based upon Sophoslabs (I don’t believe they are some random entity) and a number of other security sites labeling ftpupload.net as a potential threat, right or wrong. It seems as though this labeling might be related to either/both problems with ftpupload.net certificates or users of ftpupload.net engaging in suspicious behavior. Stuff happens. I don’t know ftpupload.net’s policies regarding users who do not abide by security rules. Unless I can get Avira to remove ftpupload.net from their threat list, then I don’t believe moving my equipment to an unsecured Internet connection, just so I can work with ftpupload.net, is necessarily a solution. Seems like it’s treating the symptom instead of the disease. This is just my opinion. Trying to decide whether to stay with InfinityFree as a web hosting platform. I’ve spent a lot of money on VPNs trying to fix a problem that is outside my control.
Do you have Avira installed on your own computer? If Avira’s real-time protection is what’s preventing you from accessing the ftpupload.net domain (which is quite possible) than you should be able to whitelist it in your own system. See the first solution from this official article: https://support.avira.com/hc/en-us/articles/360000750029-Why-does-Avira-block-certain-websites
This isn’t as ideal as Avira ceasing to list it as a threat, but it’s obviously preferable to you disabling web protection entirely. This is of course assuming that this functionality actually blocks your computer from connecting to domains rather than just visiting site URLs. I’ve used Avira in the recent past but don’t currently.
They are not. Although ftpupload.net is the address a user would use to publish malicious content to their site using FTP, other users can’t access it to ftpuload.net. I’m not sure why other sites label it as a concern other than being overly cautious since it’s part of the same infrastructure.
To be honest, I’ve never had this problem trying to access ftpupload.net myself, even when I still used Avira. I’m not sure why it’s being a persistent problem for you, and I would like to help you solve it, but I’m simply not sure where to turn next.
Do you use a “safe” DNS resolver by any chance, such as Quad9 or Comodo Secure?
EdwardHamHam, thanks very much for your excellent feedback, ideas and suggestions. I do not have Avira software installed on my workstation(s). However I do suspect that one of the several routers I’ve tested (since the problems started happening) might be affiliated with Avira, based upon research. I’ve not found a readily accessible whitelist function in either of the routers, nor the VPN solutions I’ve tried.
I have emails into tech support for:
Avira
Bitdefender
Spectrum/Charter
Netgear
TPLink
ProtonVPN
NordVPN I already contacted NordVPN and they said they don’t support ftp with a standard connection, they might look at port forwarding in the future.
I’m currently using 8.8.8.8 for DNS, but I’ll try those you suggested.
This has all become more than a bit of work, just to restore InfinityFree ftp. But, I don’t give up easily when there are unanswered questions
Thanks for your feedback and info. I have an email into Avira to get more details on their blocklist services and where they might fall within my Internet routes.
That being said, this all started out of the blue and I suspect my ISP might be part of the problem.
Actually I was asking to try and narrow down your problem- my recommendation would be to not use one of those DNS resolvers I listed, as they tend to have issues with the free hosting network. But you’re currently using Google’s DNS, so I don’t believe that’s part of the issue.
I fired up the TPLink router again and neither the TPLink app nor the direct/local web access to the router have the referenced ACL control feature. That post was from 2022, so maybe it has changed. I previously tried the TPLink forum for info, but could not submit a post. Error said I had illegal url link, but it was just text. Go figure, just my luck.
And, this same problem existed with the NetGear router.
Unless you have Avira antivirus installed on your computer, and unless TPLink actively advertises that they use Avira scanning on their routers, then Avira probably can’t help you with this.
As you’ve already seen, there are many different blocklists in the world, and most provider who do blocking have their own lists. Unless you know which list is being used, or you know who is doing the blocking, there is not a lot you can do.
But didn’t you already establish that using ProtonVPN from your own computer works? Because that would mean that ProtonVPN is not blocking access to our FTP server. I understand that having the VPN setup on your router would be preferable, but if your router then blocks you from accessing the FTP server, that’s not going to work without.
And if you can resolve the block in your router, you may not need a VPN anymore to begin with.
I initially saw that TPLink was using Norton for their security platform. However, I have confirmed with TPLink that in fact their adjunct security platform is, under the hood, powered by Avira as I suspected several days ago. I submitted a ‘false positive’ request to Avira, 3 days ago, when I first suspected the issue. That being said, I had the same ftp problems with NetGear/Armor installed.
This is the reply from a TPLink rep:
Thank you very much for the feedback. ftpupload.net was classified as"Spyware/Malware" by Avira Home Security. So far, there hasn’t been a whitelist function under web protection. It is suggested to refer to this link to submit a ‘Suspected False Positive’ request on the official website of Avira here: What can I do if HomeShield Security + blocks a safe website or URL? | TP-Link Best regards.
I’ll await more info from Avira on how they plan to treat ftpupload.net. I have workarounds until I get that info.
These are dueling issues between Avira/Others and ftpupload.net. That is outside of my control. At this point it appears I may need to dump one or the other unless I can convince Avira to re-evaluate their decision. But, it’s not just Avira that sees ftpupload.net as a potential issue, right or wrong.
Fails after command: Command: AUTH TLS
