Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

Steven,

FTP is a bit difficult in combination with a firewall - and your workstation VPN connection is going though your company firewall.

The problem with FTP is that there are more than one channel in use:

1. The control / command channel port 21 (which we all know)
2. The data channel port, which is a random port dictated by the client or server (active vs passive mode)

Your FTP login and commands are working, because they use port 21. But any data transmission (GET, PUT, LS etc) is prohibited by the firewall, because this is on another random port, and you experience timeout...

The easiest way to get FTP working through the firewall is to use passive mode and let the server decide the port. Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range.

Best regards,

Christian

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

Dear Christian

>>>>  Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range. <<<<

From a Google search, I found that as of IBM i 7.3 (with PTF), we can do this in IBM i FTP server using a new environment variable QIBM_FTP_PORT_RANGE :

FTP server supports specifying a port range in the system level environmental variable QIBM_FTP_PORT_RANGE for data connections in passive mode. The port range value in QIBM_FTP_PORT_RANGE looks like this: 1-65535. The minimal valid port is 1 and the maximum valid port is 65535. It is suggested not using ports less than 1024 because the ports are reserved for system use. 

Steven,

FTP is a bit difficult in combination with a firewall - and your workstation VPN connection is going though your company firewall.

The problem with FTP is that there are more than one channel in use:

1. The control / command channel port 21 (which we all know)
2. The data channel port, which is a random port dictated by the client or server (active vs passive mode)

Your FTP login and commands are working, because they use port 21. But any data transmission (GET, PUT, LS etc) is prohibited by the firewall, because this is on another random port, and you experience timeout...

The easiest way to get FTP working through the firewall is to use passive mode and let the server decide the port. Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range.

Best regards,

Christian

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

Dear Satid

Thank you for googling this - I didn't know about the environment variable QIBM_FTP_PORT_RANGE! :-)

And thank you for all your great answers in the IBM i Community forum - your sharing of your valuable insight is really appreciated.

------------------------------
Christian Jorgensen
IT System Administrator
Network of Music Partners A/S

Original Message:
Sent: Wed February 07, 2024 01:42 AM
From: Satid Singkorapoom
Subject: Regarding FTP

Dear Christian

>>>>  Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range. <<<<

From a Google search, I found that as of IBM i 7.3 (with PTF), we can do this in IBM i FTP server using a new environment variable QIBM_FTP_PORT_RANGE :

FTP server supports specifying a port range in the system level environmental variable QIBM_FTP_PORT_RANGE for data connections in passive mode. The port range value in QIBM_FTP_PORT_RANGE looks like this: 1-65535. The minimal valid port is 1 and the maximum valid port is 65535. It is suggested not using ports less than 1024 because the ports are reserved for system use. 

------------------------------
Chance favors only the prepared mind.
-- Louis Pasteur
------------------------------
Satid S.

Original Message:
Sent: Tue February 06, 2024 05:29 AM
From: Christian Jorgensen
Subject: Regarding FTP

Steven,

FTP is a bit difficult in combination with a firewall - and your workstation VPN connection is going though your company firewall.

The problem with FTP is that there are more than one channel in use:

1. The control / command channel port 21 (which we all know)
2. The data channel port, which is a random port dictated by the client or server (active vs passive mode)

Your FTP login and commands are working, because they use port 21. But any data transmission (GET, PUT, LS etc) is prohibited by the firewall, because this is on another random port, and you experience timeout...

The easiest way to get FTP working through the firewall is to use passive mode and let the server decide the port. Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range.

Best regards,

Christian

------------------------------
Christian Jorgensen
IT System Administrator
Network of Music Partners A/S

Original Message:
Sent: Mon February 05, 2024 09:06 AM
From: Steven Riedmueller
Subject: Regarding FTP

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

------------------------------
Steven Riedmueller
Certified IBM i Admin
Speaker, Mentor, and Advocate

Original Message:
Sent: Sat February 03, 2024 10:26 AM
From: jerry ven
Subject: Regarding FTP

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

------------------------------
jerry ven
------------------------------

Dear Satid

Thank you for googling this - I didn't know about the environment variable QIBM_FTP_PORT_RANGE! :-)

And thank you for all your great answers in the IBM i Community forum - your sharing of your valuable insight is really appreciated.

Dear Christian

>>>>  Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range. <<<<

From a Google search, I found that as of IBM i 7.3 (with PTF), we can do this in IBM i FTP server using a new environment variable QIBM_FTP_PORT_RANGE :

FTP server supports specifying a port range in the system level environmental variable QIBM_FTP_PORT_RANGE for data connections in passive mode. The port range value in QIBM_FTP_PORT_RANGE looks like this: 1-65535. The minimal valid port is 1 and the maximum valid port is 65535. It is suggested not using ports less than 1024 because the ports are reserved for system use. 

Steven,

FTP is a bit difficult in combination with a firewall - and your workstation VPN connection is going though your company firewall.

The problem with FTP is that there are more than one channel in use:

1. The control / command channel port 21 (which we all know)
2. The data channel port, which is a random port dictated by the client or server (active vs passive mode)

Your FTP login and commands are working, because they use port 21. But any data transmission (GET, PUT, LS etc) is prohibited by the firewall, because this is on another random port, and you experience timeout...

The easiest way to get FTP working through the firewall is to use passive mode and let the server decide the port. Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range.

Best regards,

Christian

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

I tried to get in contact with Satid, off community, and failed.  I really wanted to nominate him for an IBM Champion.  I believe he is no longer an IBM employee and therefore is eligible.  I needed an email address.

------------------------------
Robert Berendt IBMChampion

Original Message:
Sent: Wed February 07, 2024 02:00 AM
From: Christian Jorgensen
Subject: Regarding FTP

Dear Satid

Thank you for googling this - I didn't know about the environment variable QIBM_FTP_PORT_RANGE! :-)

And thank you for all your great answers in the IBM i Community forum - your sharing of your valuable insight is really appreciated.

------------------------------
Christian Jorgensen
IT System Administrator
Network of Music Partners A/S

Original Message:
Sent: Wed February 07, 2024 01:42 AM
From: Satid Singkorapoom
Subject: Regarding FTP

Dear Christian

>>>>  Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range. <<<<

From a Google search, I found that as of IBM i 7.3 (with PTF), we can do this in IBM i FTP server using a new environment variable QIBM_FTP_PORT_RANGE :

FTP server supports specifying a port range in the system level environmental variable QIBM_FTP_PORT_RANGE for data connections in passive mode. The port range value in QIBM_FTP_PORT_RANGE looks like this: 1-65535. The minimal valid port is 1 and the maximum valid port is 65535. It is suggested not using ports less than 1024 because the ports are reserved for system use. 

------------------------------
Chance favors only the prepared mind.
-- Louis Pasteur
------------------------------
Satid S.

Original Message:
Sent: Tue February 06, 2024 05:29 AM
From: Christian Jorgensen
Subject: Regarding FTP

Steven,

FTP is a bit difficult in combination with a firewall - and your workstation VPN connection is going though your company firewall.

The problem with FTP is that there are more than one channel in use:

1. The control / command channel port 21 (which we all know)
2. The data channel port, which is a random port dictated by the client or server (active vs passive mode)

Your FTP login and commands are working, because they use port 21. But any data transmission (GET, PUT, LS etc) is prohibited by the firewall, because this is on another random port, and you experience timeout...

The easiest way to get FTP working through the firewall is to use passive mode and let the server decide the port. Some FTP servers (e.g. GoAnywhere MFT, which runs on IBM i) have a setting telling which port range it will use - but I'm not familiar with such setting on the native FTP server on IBM i. You would then have to make the firewall allow that port range for outgoing rules - or for all ports outgoing, if the server has no range.

Best regards,

Christian

------------------------------
Christian Jorgensen
IT System Administrator
Network of Music Partners A/S

Original Message:
Sent: Mon February 05, 2024 09:06 AM
From: Steven Riedmueller
Subject: Regarding FTP

In my environment I connect my Windows workstation to my company VPN.  If I try to FTP from my workstation to an IBM i LPAR I'm able to connect, but as soon as I try to do a transfer (GET, PUT, or even LS) the attempt will timeout and disconnect.  If I need to get something up to the server from my workstation I'll use the ACS IFS plugin.  I wonder if it's a similar situation in your case.

------------------------------
Steven Riedmueller
Certified IBM i Admin
Speaker, Mentor, and Advocate

Original Message:
Sent: Sat February 03, 2024 10:26 AM
From: jerry ven
Subject: Regarding FTP

Hi,

1)When trying to send/receive file using FileZilla it's neither moving (FTP is not successful) nor getting downloaded (in readable format) are there any settings changes need to be made to enable the same?

2) What about CPYTOIMPF and CPYFRMIMPF commands do they serve the same pupose?

3) Once I am connected inside IBM i then if i do FTP and get commands by default if FTP is successful where does it get downloaded?( any default directory path?)

4) If i try to download any source member then using IBM i ACS why does it not get downloaded fully any changes in the IBM i ACS need to be done?

5) WinSCP also serve the same purpose? ( i mean can we do FTP using it ? , is it free to download and use?

Thanks

------------------------------
jerry ven
------------------------------