Re: FTP on IIS6.0 Not Working

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 03/02/04

  • Next message: Bernard: "Re: FTP Error" 
    Date: Tue, 2 Mar 2004 11:30:18 +0800

    Great. looks like is ISA ports blocking issue, now -

    do you configure FTP running other than default port 21 ?
    FTP Error: 500 Invalid PORT Command
    http://support.microsoft.com/?id=281193

    active mode uses 21 and 20, passive mode by default use
    dynamic port range from 1024 to 5000.

    check if your ISA allow connection for port 21/20. this should
    solve active mode connection.

    For passive mode, you configure passiveportrange in IIS 6.0.
    then open the port range in ISA..
    How To Configure PassivePortRange In IIS
    http://support.microsoft.com/?id=555022 

    -- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:#bF1#K0$DHA.1548@TK2MSFTNGP12.phx.gbl...
> Wow.. you have many problems.
> Can we start one by one ?
>
> a) first, test everything locally first.
> can you login locally using ftp.exe -> ftp localhost ? or ftp yourip ?
>
> b) so you have ISA running in the same box with IIS 6 ?
>
> c) from remote machine, can you login via ftp.exe to your IIS server?
> try login and dir listing.
> any problem ?
>
> d) if you use IE to connect, any problems ?
>
>
> -- 
> Regards,
> Bernard Cheah
> http://support.microsoft.com/
> Please respond to newsgroups only ...
>
>
> "Jenna" <stilesj AT meachamapel DOT com> wrote in message
> news:OLQ8YOW$DHA.4080@TK2MSFTNGP09.phx.gbl...
> > Okay, bear with me on this...I feel like I've tried everything and can't
> get
> > this to work!
> >
> > I had virtual directories set up for an FTP site on our server and they
> were
> > working fine.  They we upgraded the server from Windows 2000 Server to
> > Windows Server 2003 (also Exchange 2000 to Exchange 2003) and from
IIS5.0
> to
> > IIS6.0.
> > I guess IIS had a little trouble updating at the time and when it got
> > updated my FTP virtual directories got wiped out.  No problem, I said,
> I'll
> > just recreate them.
> > Well, I have recreated them and they are inaccessible from remote
> computers
> > over the internet (I can get on from a computer on the LAN).
> > What happens is when I type in the address, it asks for my password
> normally
> > and even accepts my user name and password, but then breaks down with
this
> > message:
> > 200 Type set to A
> > 500 Invalid PORT command
> > 500 LPRT 6,16,0,0,0,0,0,0,0,0,67,0,0,0,0,0,133,96,2,13,29
> >
> > I was originally referred to KB281193.  I'm not sure how this article
> > provides a solution, though, and the LPRT response I get is clearly not
> like
> > the 6 number example shown.
> > The attempt above was without Passive Mode checked in IE.  With Passive
> Mode
> > checked, it just times out after entering the user name and password.
> > I am running ISA Server 2000, but this was set up before the upgrade to
> > IIS6.0 and I believe all the settings are fine here to allow access.  I
> have
> > gone through articles 310110 and 294679 just to be sure.  When I
followed
> > the "Publish the FTP Site" instructions in 310110, I got an event log
> error:
> > Web Proxy Service failed to bind its socket to 10.0.1.2 port 80.  Could
be
> > another service using same port or a NIC that's not functional.
> > (The NIC is fine and the service continues to run after this message.)
> >
> > When following article 294679, it mentions changing the EnablePortAttack
> > value to 1.  However, I cannot find this variable (or, I believe the IIS
> > help file mentioned another name for it in 6.0) in the registry
anywhere.
> > Is this something that I'm supposed to create, or does the fact that its
> > missing mean that IIS6.0 is not properly installed?
> >
> > I also read some information about setting the PassivePortRange
> (KB555022),
> > but am not sure how this would help.
> >
> > Another note that may or may not be helpful:  I'm setting up the virtual
> > directories on FTP as a path to another server.  I have it set up to use
> the
> > user's authentication so that it uses their permissions when accessing
the
> > folder.  This does cause an error in the event log upon creation and
> > reboots:
> > Unable to add virtual root '/foldername' for the directory
> > '\\server\foldername' due to the following error: Access is denied.
> > Despite this I can still access this from a computer on the LAN.  If I
> > assign to use a specific user's permissions, I don't get that error, but
> > there's too much access then, and I still can't access remotely.
> >
> > Finally, I've been considering doing a VPN using PPTP for a more secure
> > option instead...is this relatively easy and should I just try that and
> give
> > up on FTP?
> > Thanks, anyone, for some help or advice...this is driving me crazy!
> >
> >
>
>
  • Next message: Bernard: "Re: FTP Error"

    Relevant Pages

    • Re: Passive Mode FTP & Firewall
      ... the passiveportrange is at high range of 52xxx ... your firewall and in which direction, this commented FTP network trace may ... Establish FTP Control Channel TCP Connection Through Standard FTP Port 21: ... Server side outbound firewall must allow packets 'from' port 21 ...
      (microsoft.public.inetserver.iis.ftp)
    • Re: ISA 2004 and FTP problems - Problem Fixed after much trial and error
      ... I am finding out that ISA 2004 is very particular on how ... The first rule that I defined that allowed Passive FTP Transfers ... with only TCP port 21 Outbound defined. ... After much more trial an error, I deleted out my FTP Access Rule, ...
      (microsoft.public.isaserver)
    • Re: site stopped working
      ... I didn't the ISA part was blur maybe due to the medication:( ... do you have any machine on the same subnet together with the sbs machine ... if the port is forwarding correctly you would at least see the ftp login ... firewall is a comcast small business router that has nat built in and port ...
      (microsoft.public.inetserver.iis.ftp)
    • Re: ISA 2004 Server publishing
      ... The fact that it affects your ISA behavior is odd. ... With 'Enable folder view for FTP sites' enabled for IE 6. ... So, conclusion, the data connection on port 20, which should be ... >> I got following Server Publishing Failure ...
      (microsoft.public.isaserver)
    • Re: 100s of logon errors for MSFTPSVC, event id: 100
      ... Opening your port 21 opens your server to FTP requests. ... when you tick the box in ISA related to FTP uploading this configures a data port to receive. ... opened to your server is incoming requests i.e the hackers you are seeing. ...
      (microsoft.public.windows.server.sbs)
    Loading