مشکل با Data Socket در FTP

[NarvanData]

سلام دوستان
من روی سرور از روترمیکروتیک استفاده کردم
برای FTP هم پورت 21 باز هست و بقیه پورت ها بسته...

زمان اتصال با برنامه CuteFTP جز اینکه به پورت 21 وصل میشه به "FTP data socket" هم نیاز داره که چون پورت ها رو بستم نمیشه وصل شد کامل
آیا راهی هست که فقط از 21 استفاده بشه یا اون "FTP data socket" از پورتی که ما تعیین کردیم استفاده کنه و Random برای خودش پورت انتخاب نکنه؟
123.456.789.111 : آی.پی سرور مثال هست

*** CuteFTP 9.0 - build Nov 9 2012 ***

STATUS:> [13/09/26 4:35:32 ] Getting listing ""...
STATUS:> [13/09/26 4:35:32 ] Connecting to FTP server... 123.456.789.111:21 (ip  = 123.456.789.111)...
STATUS:> [13/09/26 4:35:34 ] Socket connected. Waiting for welcome message...
[13/09/26 4:35:34 ] 220 Microsoft FTP Service
STATUS:> [13/09/26 4:35:34 ] Connected. Authenticating...
COMMAND:> [13/09/26 4:35:34 ] USER administrator
[13/09/26 4:35:34 ] 331 Password required for administrator.
COMMAND:> [13/09/26 4:35:34 ] PASS *****
[13/09/26 4:35:34 ] 230 User administrator logged in.
STATUS:> [13/09/26 4:35:34 ] Login successful.
COMMAND:> [13/09/26 4:35:34 ] SYST
[13/09/26 4:35:35 ] 215 Windows_NT
STATUS:> [13/09/26 4:35:35 ] Host type detected: Windows NT.
COMMAND:> [13/09/26 4:35:35 ] PWD
[13/09/26 4:35:35 ] 257 "/" is current directory.
STATUS:> [13/09/26 4:35:35 ] Home directory: /
COMMAND:> [13/09/26 4:35:35 ] FEAT
[13/09/26 4:35:35 ] Informational Message Only:
211-Extended features supported:
SIZE
MDTM
211 END
STATUS:> [13/09/26 4:35:35 ] This site supports features.
STATUS:> [13/09/26 4:35:35 ] This site supports SIZE.
STATUS:> [13/09/26 4:35:35 ] Setting up character encoding.
COMMAND:> [13/09/26 4:35:35 ] OPTS UTF8 on
[13/09/26 4:35:36 ] 501 option not supported
STATUS:> [13/09/26 4:35:36 ] Using local encoding.
COMMAND:> [13/09/26 4:35:36 ] REST 100
[13/09/26 4:35:36 ] 350 Restarting at 100.
STATUS:> [13/09/26 4:35:36 ] This site can resume broken downloads.
STATUS:> [13/09/26 4:35:36 ] Time zone synchronization
COMMAND:> [13/09/26 4:35:36 ] TYPE I
[13/09/26 4:35:36 ] 200 Type set to I.
COMMAND:> [13/09/26 4:35:36 ] PASV
[13/09/26 4:35:37 ] 227 Entering Passive Mode (123,456,789,111,197,26).
COMMAND:> [13/09/26 4:35:37 ] REST 0
[13/09/26 4:35:37 ] 350 Restarting at 0.
COMMAND:> [13/09/26 4:35:37 ] STOR gs_tmp_tz.4823.29
STATUS:> [13/09/26 4:35:37 ] Connecting FTP data socket...  123.456.789.111:50458...
ERROR:> [13/09/26 4:35:58 ] The connection failed due to an error or timeout.
1) Verify that the destination IP address is correct.
2) Increase the connection timeout threshold under Global Settings | Connection.
3) Switch to the opposite data connection type (PASV or PORT) under Site  Settings | Type tab.
4) Verify that the problem is not local by trying to connect to an alternate  server.
5) If a server name was used, verify it resolves to the correct address.
6) If using a local server table for server name resolution, check to see that  it doesn't resolve to an obsolete address.
7) Try pinging the address.
8) If you are using a router, verify the router is up and running (check by  pinging it and then ping an address outside of the router).
9) Do a traceroute to the destination to verify all routers along the connection  path are operational.
10) Verify that your subnet mask is setup properly.
11) Verify that your local software or hardware firewall is not blocking  outbound connections originating from CuteFTP.
12) Verify that your anti-virus software is not at fault (try disabling it).
NOTE:> [13/09/26 4:35:58 ] Time zone synchronization failed.
STATUS:> [13/09/26 4:35:58 ] Time zone synchronization
COMMAND:> [13/09/26 4:35:58 ] PASV
[13/09/26 4:35:59 ] 425 Can't open data connection.
STATUS:> [13/09/26 4:35:59 ] PASV failed, trying PORT.
COMMAND:> [13/09/26 4:35:59 ] PORT 192,168,1,5,216,27
[13/09/26 4:35:59 ] 500 Invalid PORT Command.
ERROR:> [13/09/26 4:35:59 ] Syntax error: command unrecognized.
ERROR:> [13/09/26 4:35:59 ] Failed to establish data socket.
NOTE:> [13/09/26 4:35:59 ] Time zone synchronization failed.
COMMAND:> [13/09/26 4:35:59 ] TYPE A
[13/09/26 4:36:00 ] 200 Type set to A.
COMMAND:> [13/09/26 4:36:00 ] PORT 192,168,1,5,216,28
[13/09/26 4:36:00 ] 500 Invalid PORT Command.
ERROR:> [13/09/26 4:36:00 ] Syntax error: command unrecognized.
ERROR:> [13/09/26 4:36:00 ] Failed to establish data socket.
  

[NarvanData]

UP

[Creepy]

FTP نیاز به دو Port داره.

در تنظیمات FTP Server میتونید برای حالت Passive برای Data Port یک Range تعریف کنید و در Firewall اون Range رو باز کنید.

[d3m0n3y3z]

پروتکل FTP چه در حالت active و چه در حالت passive به 2 تا پورت احتیاج داره.