FTP Backups to Wasabi S3 Storage

[rjamesm2884]

Hello,

We have a 3CX server running on Debian and would like to start backing up to our Hot Storage with Wasabi. Currently, this is supported via FTP or FTPS. I have tested my credentials using a third-party FTP client and I'm able to log in. For some FTP will not work through 3CX. I have open port 21 on the firewall to allow the connection but it's not working. Any ideas?

 

[cobaltit]

Not sure what you mean by 'I have open port 21 on the firewall'. Did you do the same thing for your third-party FTP client? You don't need any inbound ports open to 3CX to FTP out and I assume you aren't blocking outgoing traffic by default. Like anything else, you need to see why the server, in this case Wasabi, is rejecting it by asking them. Generally it's permissions.

 

[rjamesm2884]

Not sure what you mean by 'I have open port 21 on the firewall'. Did you do the same thing for your third-party FTP client? You don't need any inbound ports open to 3CX to FTP out and I assume you aren't blocking outgoing traffic by default. Like anything else, you need to see why the server, in this case Wasabi, is rejecting it by asking them. Generally it's permissions.

I apologize. I open port 21 on the firewall where I'm hosting the 3CX server. There are no issues login through a third-party FTP client such a Filezilla or Winscp.

This is the error I get.

Backup location configuration error. Please proceed and verify the configuration.

 

[cobaltit]

So again, if by opened port 21 on the firewall you mean port forwarding TO 3CX there's no need for that. And unless you are are blocking outbound traffic by default there's no need to open it for outbound. But you'll need to talk to Wasabi to see what they see on their end.

 

[rjamesm2884]

So again, if by opened port 21 on the firewall you mean port forwarding TO 3CX there's no need for that. And unless you are are blocking outbound traffic by default there's no need to open it for outbound. But you'll need to talk to Wasabi to see what they see on their end.

I believe all ports need to be manually configured through Azure's NSG, that's why I open the port 21 if you don't map ports outbound connections won't work.

 

[VoIP-Cloud]

eeehm.... Wasabi is S3 Storage, how do you want do connect to a S3 bucket via ftp(s) ?

 

[rjamesm2884]

eeehm.... Wasabi is S3 Storage, how do you want do connect to a S3 bucket via ftp(s) ?

Wasabi has an FTP option that you can enable and it should connect. I still can't get connected to the FTP.

 

[VoIP-Cloud]

ah ok, got it. And you are using your root credentials to login? Afaik as wasabis says the only way to connect via ftp...

 

[rjamesm2884]

ah ok, got it. And you are using your root credentials to login? Afaik as wasabis says the only way to connect via ftp...

Yes, sir.

 

[VoIP-Cloud]

and inside is an folder you have r/w rights? And this folder is known by 3CX backup path?

 

[A.Takacs]

Can you access said FTP location from another FTP client ?

 

[rjamesm2884]

and inside is an folder you have r/w rights? And this folder is known by 3CX backup path?

Yes, full read and write access to the FTP bucket and folder. I even tried setting up to the root level.

 

[rjamesm2884]

Can you access said FTP location from another FTP client ?

Yes, I can use WinSCP to access FTP on the server I can log in without a problem. I also updated 3CX to version 5 and that has no change.

 

[A.Takacs]

To add to the other suggestions also make sure the phone got the correct time settings.

WinSCP from the server itself ?
I do regularly use FTP for backup without any issue but never tried to wasabi...

 

[rjamesm2884]

WinSCP from the server itself ?
I do regularly use FTP for backup without any issue but never tried to wasabi...

Not from the server. This is a Debian server running in Azure. I've tried connecting via my Windows machine with WinSCP to Wasabi FTP's and it works.

 

[A.Takacs]

I think so should SSH to the machine in Azure and from there try FTP ...

 

[rc179]

Any resolution on this, I'm also having issues with FTP and FTPS. I'm using Filezilla Server and both work fine when I connect with an FTP client on a workstation.

When using FTP, the authentication works and the server gets to
" 229 Entering Extended Passive Mode (|||57414|)"
Then receives a "QUIT" from the 3CX

When using FTPS the server logs (yes, those garbage character are what is being sent);
Connected, sending welcome message...
220-This is a secure system,
220-unauthorized access is prohibited,
220 violators will be prosecuted.

500 Syntax error, command unrecognized.
À
500 Syntax error, command unrecognized.
¼Úû,öÄùƒ?ƒ©£À\[?*8’tþ²»y4½“
500 Syntax error, command unrecognized.
8À,À0
500 Syntax error, command unrecognized.
ŸÌ©Ì¨ÌªÀ+À/
500 Syntax error, command unrecognized.
žÀ$À(
500 Syntax error, command unrecognized.
kÀ#À'
500 Syntax error, command unrecognized.
gÀ
500 Syntax error, command unrecognized.
À
500 Syntax error, command unrecognized.
9À À
500 Syntax error, command unrecognized.
3
500 Syntax error, command unrecognized.

500 Syntax error, command unrecognized.
œ
500 Syntax error, command unrecognized.
=
500 Syntax error, command unrecognized.
<
500 Syntax error, command unrecognized.
5
500 Syntax error, command unrecognized.
/
500 Syntax error, command unrecognized.

500 Syntax error, command unrecognized.
could not send reply, disconnected.

 

[A.Takacs]

All I can say I have no problem to backup from my debian based 3cx to a Synology NAS using FTP.

 

[rc179]

All I can say I have no problem to backup from my debian based 3cx to a Synology NAS using FTP.

Are you using TLS, do you require authentication?

 

[innotip]

Hi, You probably didn't open outbound PASV ports on your 3CX server on Azure NSG. Your FTP server is giving PASV ports and your 3CX tries to connect to those ports (maybe can be configured or at least displayed - usually high port range)