Ftp not connecting to ip

UNIX Solaris
1

If i do a ftp localhost , it works but if i do a ftp x.x.x.x (ip ) it does not work thoug all the services are running what could be the reason for this

bash-3.00# ftp localhost
Connected to localhost.
220-
bash-3.00# ftp 10.63.25.176
Connected to 10.63.25.176.
421 Service not available, remote server has closed connection
ftp> netstat -a | grep ftp | grep -v tft^C
ftp> bye

bash-3.00# netstat -a | grep ftp | grep -v tftp
      *.ftp                *.*                0      0 49152      0 LISTEN
      *.ftp                             *.*                             0      0 49152      0 LISTEN
bash-3.00# svcs ftp
STATE          STIME    FMRI
online          5:02:51 svc:/network/ftp:default
2

Make sure that you are trying to connect with right IP address. Please paste the output of :

#ifconfig -a
#netstat -an | grep 21

Thanks,
Deepak

3

netstat o/p is already there and i know the address its correct address for my server itself still i 'm pasting the ifconfig o/p

bash-3.00# ifconfig e1000g0
e1000g0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 10.63.25.176 netmask fffffc00 broadcast 10.63.27.255
ether 0:14:4f:d3:cf:3e
bash-3.00#

4

You may be getting blocked by wrappers which are set up by default.

$ /usr/sbin/inetadm -l ftp|grep wrappers
default  tcp_wrappers=TRUE

If that is the case you would get a closed connection. Verify you have a in.ftpd:ALL (or whatever IPs) statement in /etc/hosts.allow (it may say in.ftpd:127.0.0.1)

There should be output in /var/adm/messages that details the failed connection.

5

# /usr/sbin/inetadm -l ftp|grep wrappers
default tcp_wrappers=FALSE
#

This started after i installed security toolkit on the system.

6

By default, root is disabled from ftp. Did you check your /etc/ftpd/ftpusers file?

7

You might be running into a TCP_FUSION related bug.

If that is the case then

Add the following lines at the bottom of the /etc/system file.

(Reboot to take affect.)

* Disable tcp fusion
set ip:do_tcp_fusion = 0�0
8

# mdb -k
Loading modules: [ unix krtld genunix specfs dtrace ufs sd pcipsy ip
sctp usba fctl nca crypto zfs random ipc nfs audiosup logindmux ptm
cpc fcip sppp lofs ]
> do_tcp_fusion/X
do_tcp_fusion:
do_tcp_fusion: 0
If the value returned is "0" the host is not impacted.