FTP error: ECONNREFUSED - Connection refused by server

Obvious things checked ? server IP address is correct ? misplaced digit etc will try to connect to someone else's server

First thing is to check if your CSF Firewall is running

what's output for this command

Code (Text):

systemctl status csf lfd | sed -e "s|$(hostname)|hostname|g"

check system log for pure-ftpd related entries to see if there's any clues - i would replace your outputted server and client IPs and ftp username with dummy ones for privacy

Code (Text):

grep 'pure-ftpd' /var/log/messages

example from my local virtualbox guest Centmin Mod 123.09beta01 server after logging in with pure-ftpd virtual ftp user = ftp1 via filezilla

Code (Text):

grep 'pure-ftpd' /var/log/messages
Jan 12 03:43:58 centos7 pure-ftpd: (?@192.168.0.12) [INFO] New connection from 192.168.0.12
Jan 12 03:43:58 centos7 pure-ftpd: (?@192.168.0.12) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jan 12 03:44:07 centos7 pure-ftpd: (?@192.168.0.12) [INFO] ftp1 is now logged in
Jan 12 03:44:07 centos7 pure-ftpd: (ftp1@192.168.0.12) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jan 12 03:45:56 centos7 pure-ftpd: (ftp1@192.168.0.12) [INFO] Logout.

For posting code or output from commands to keep the formatting, you might want to use CODE tags for code How to use forum BBCODE code tags

 

Double check your Filezilla settings are close to ones displayed at https://centminmod.com/ftp.html

Also are you connecting via a local LAN pc to a local LAN installed Centmin Mod instance ? Or to remote live IP based Centmin Mod instance ?

If local LAN, check official Centmin Mod FAQ item 40 for further clues https://centminmod.com/faq.html

 

The other possibility is your ISP has blocked FTP port 21 at their end ??

 

check if your ISP IP is being blocked in anyway by CSF Firewall - see unblocking ISP IP section of https://centminmod.com/csf_firewall.html
check if your ISP IP address has been blocked by grepping CSF Firewall IPs

Code (Text):

csf -g ISPIPADDRRESS

To remove your ISP IP address from CSF Firewall block, there's 2 methods. First, is manually editing /etc/csf/csf.deny to remove ISP IP and restart CSF Firewall. Second, method is using command:

Code (Text):

csf -dr ISPIPADDRRESS

to verify IP the system sees for you you can type

Code (Text):

w

or

Code (Text):

echo $SSH_CLIENT

also check if pure-ftpd's passive port range 30001 to 50011 is setup in CSF Firewall and FTP port 21

Code (Text):

csf -l  | egrep 'dpt:30001|dpt:21'

example output

Code (Text):

csf -l  | egrep 'dpt:30001|dpt:21'
12       0     0            tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 state NEW recent: SET name: 21 side: source mask: 255.255.255.255
13       0     0 PORTFLOOD  tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 state NEW recent: UPDATE seconds: 300 hit_count: 20 name: 21 side: source mask: 255.255.255.255
19       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            state NEW tcp dpt:21
43       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            state NEW udp dpt:21
25       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            state NEW tcp dpt:21
41       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            state NEW udp dpt:21

 

Also what type of server is it ? VPS or dedicated ? output for

Code (Text):

virt-what

Who's your web host ? do they have their own firewall in front of the server too ? i.e. Amazon AWS EC2 and Google Cloud VM servers have their own firewall in front and optionally DigitalOcean and Vultr do too.

 

sorry was missing a s from egrep for 30001 port filter so command

Code (Text):

csf -l  | egrep 'dpts:30001|dpt:21'

would reveal if passive ports 30001 to 50011 where whitelisted

like below example

Code (Text):

csf -l  | egrep 'dpts:30001|dpt:21'
29     145  6144            tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 state NEW recent: SET name: 21 side: source mask: 255.255.255.255
30       5   212 PORTFLOOD  tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21 state NEW recent: UPDATE seconds: 300 hit_count: 5 name: 21 side: source mask: 255.255.255.255
36     140  5932 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            state NEW tcp dpt:21
54   53126 2288K ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            state NEW tcp dpts:30001:50011
67       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            state NEW udp dpt:21
28       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            state NEW tcp dpt:21
50       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            state NEW udp dpt:21

But looks like mightweb does indeed have their own firewall https://my.mightweb.net/knowledgebase/13/Do-you-block-ports.html. So need need to ask if port 21 and ports 30001 to 50011 are blocked

If they are, you can just use root user port 22 and SFTP and ensure uploaded files get user/group permissions = nginx as outlined in Getting Started Guide step 2 for chown -R nginx:nginx command on your public web root.

 

For pure-ftpd passive mode need ports 21 and ports 30001 to 50011 open

see https://community.centminmod.com/th...stack-csf-firewall-default-port-listing.5670/

 

Ah so not related to VPSes. But yes for pure-ftpd passive FTP need port 21 and 30001 to 50011 ports open which is the default for CSF Firewall already and showed in your output to be in place/working.

Other places you could run into issues is if you have any other firewalls in between your computer and Centmin Mod server other than CSF Firewall which don't have such ports open.

But you can side step that, using root user and SFTP and port 22 too with what I previously wrote

You can also try creating a 2nd dummy nginx vhost site via centmin.sh menu option 2 and seeing if that generated pure-ftpd credentials are able to login via FTP and filezilla. Or on an hourly billed VPS host like vultr, digitalocean, linode or like highly recommended Upcloud - signees also get US$25 credits to use as well create a test VPS and install Centmin Mod and verify if new nginx vhost pure-ftpd account works on such server to rule out issues on your mightweb server and then destroy that VPS instead - at most 1hr will be a few cents from your US$25 credits

 

ah forgot to check the obvious if pure-ftpd server is running/started

what's output for command below ?

Code (Text):

service pure-ftpd status | sed -e "s|$(hostname)|hostname|g"

if pure-ftpd server isn't running start it and ensure reboots start it too

Code (Text):

service pure-ftpd start
chkconfig on
systemctl enable pure-ftpd

 

Yeah sometimes we overlook the obvious

 

It should of been started/enabled on initial install. So strange that it wasn't. If you want to dig into the initial install log, you can via https://community.centminmod.com/threads/how-to-troubleshoot-centmin-mod-initial-install-issues.102/