Re: FTP on IIS6.0 Not Working

From: Jenna (stilesj)
Date: 03/01/04 

Date: Mon, 1 Mar 2004 11:31:50 -0500

I know I wrote many problems...I just wanted to make sure all the info was
out there :)
Thanks for taking the time to respond. To answer your questions, see inline
below

"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:%23bF1%23K0$DHA.1548@TK2MSFTNGP12.phx.gbl...
> Wow.. you have many problems.
> Can we start one by one ?
>
> a) first, test everything locally first.
> can you login locally using ftp.exe -> ftp localhost ? or ftp yourip ?
Trying ftp.exe locally from my machine (on the LAN), I can login and list
the directory just fine using the localhost name or the local IP address.
Using the public IP address the connection was refused, but perhaps this is
normal when trying to connect from inside?
>
> b) so you have ISA running in the same box with IIS 6 ?
Yes, they are running on the same box. ISA was running with IIS5.0 fine
before, but the upgrade to 6.0 seems to have killed it (new security
measures with 6.0 and Windows 2003?). The appropriate packet filters, etc.
were already set up on ISA per KB article 294679 and I have double-checked
them since. I also tried the instructions in article 310110. I had some
issue with the instructions in both these articles per my description in the
original question...perhaps the root of the problem?
>
> c) from remote machine, can you login via ftp.exe to your IIS server?
> try login and dir listing.
> any problem ?
>From a remote machine using ftp.exe I can login and it accepts my password.
However, when I try ls at the prompt, it returns:
500 Invalid PORT command
150 Opening ASCII mode data connection for /bin/ls
Times out Can't open data connection
>
> d) if you use IE to connect, any problems ?
Using IE to connect:
What happens is when I type in the address, it asks for my password
normally and even accepts my user name and password, but then breaks down
with this message:
200 Type set to A
500 Invalid PORT command
500 LPRT 6,16,0,0,0,0,0,0,0,0,67,0,0,0,0,0,133,96,2,13,29

(that's without passive mode checked...with passive mode checked it just
times out after accepting my user name and password) The ftp logs on the
server seem to indicate that I successfully logged in to ftp, then timed out
due to inactivity.

>
>
> --
> Regards,
> Bernard Cheah
> http://support.microsoft.com/
> Please respond to newsgroups only ...
>
>
> "Jenna" <stilesj AT meachamapel DOT com> wrote in message
> news:OLQ8YOW$DHA.4080@TK2MSFTNGP09.phx.gbl...
> > Okay, bear with me on this...I feel like I've tried everything and can't
> get
> > this to work!
> >
> > I had virtual directories set up for an FTP site on our server and they
> were
> > working fine. They we upgraded the server from Windows 2000 Server to
> > Windows Server 2003 (also Exchange 2000 to Exchange 2003) and from
IIS5.0
> to
> > IIS6.0.
> > I guess IIS had a little trouble updating at the time and when it got
> > updated my FTP virtual directories got wiped out. No problem, I said,
> I'll
> > just recreate them.
> > Well, I have recreated them and they are inaccessible from remote
> computers
> > over the internet (I can get on from a computer on the LAN).
> > What happens is when I type in the address, it asks for my password
> normally
> > and even accepts my user name and password, but then breaks down with
this
> > message:
> > 200 Type set to A
> > 500 Invalid PORT command
> > 500 LPRT 6,16,0,0,0,0,0,0,0,0,67,0,0,0,0,0,133,96,2,13,29
> >
> > I was originally referred to KB281193. I'm not sure how this article
> > provides a solution, though, and the LPRT response I get is clearly not
> like
> > the 6 number example shown.
> > The attempt above was without Passive Mode checked in IE. With Passive
> Mode
> > checked, it just times out after entering the user name and password.
> > I am running ISA Server 2000, but this was set up before the upgrade to
> > IIS6.0 and I believe all the settings are fine here to allow access. I
> have
> > gone through articles 310110 and 294679 just to be sure. When I
followed
> > the "Publish the FTP Site" instructions in 310110, I got an event log
> error:
> > Web Proxy Service failed to bind its socket to 10.0.1.2 port 80. Could
be
> > another service using same port or a NIC that's not functional.
> > (The NIC is fine and the service continues to run after this message.)
> >
> > When following article 294679, it mentions changing the EnablePortAttack
> > value to 1. However, I cannot find this variable (or, I believe the IIS
> > help file mentioned another name for it in 6.0) in the registry
anywhere.
> > Is this something that I'm supposed to create, or does the fact that its
> > missing mean that IIS6.0 is not properly installed?
> >
> > I also read some information about setting the PassivePortRange
> (KB555022),
> > but am not sure how this would help.
> >
> > Another note that may or may not be helpful: I'm setting up the virtual
> > directories on FTP as a path to another server. I have it set up to use
> the
> > user's authentication so that it uses their permissions when accessing
the
> > folder. This does cause an error in the event log upon creation and
> > reboots:
> > Unable to add virtual root '/foldername' for the directory
> > '\\server\foldername' due to the following error: Access is denied.
> > Despite this I can still access this from a computer on the LAN. If I
> > assign to use a specific user's permissions, I don't get that error, but
> > there's too much access then, and I still can't access remotely.
> >
> > Finally, I've been considering doing a VPN using PPTP for a more secure
> > option instead...is this relatively easy and should I just try that and
> give
> > up on FTP?
> > Thanks, anyone, for some help or advice...this is driving me crazy!
> >
> >
>
>

Relevant Pages

  • Odd ftpd Problem
    ... My ftpd server fails when requesting passive mode from an internet client, ... I have a separate multi-homed server for the network firewall. ... except for the ftp passive mode. ...
    (linux.redhat.misc)
  • Re: Microsoft FTP through Firewall
    ... 227 Entering Passive Mode ... address that the client will use to try to contact the server. ... FTP server that will allow you to specify the ip address you want to ...
    (comp.security.firewalls)
  • Re: Microsoft FTP through Firewall
    ... 227 Entering Passive Mode ... address that the client will use to try to contact the server. ... FTP server that will allow you to specify the ip address you want to ...
    (comp.security.firewalls)
  • Re: Problem with FTP
    ... with this I wanted to allow the active and passive FTP ... I know that in active mode when the server starts the ... Then my client says that it ... > starts the passive mode, but I can not even do an ls in the FTP ...
    (comp.os.linux.networking)
  • Re: Problem while copying the file
    ... Please help me copying the file from my view on the server to my ... It looks like you're running ftp from the command prompt on your PC. ... "get" will ftp the file over from the remote machine to your PC. ... will upload the file from your PC to the remote machine. ...
    (comp.unix.shell)