Re: 500 "LPRT 6,16,0,0,0,0...,34,113,2,7,184' New Information

From: Paul Lynch (paul.lynch_at_nospam.com)
Date: 04/19/04


Date: Mon, 19 Apr 2004 20:33:22 +0100

On Mon, 19 Apr 2004 11:44:52 -0700, "Thurmus"
<anonymous@discussions.microsoft.com> wrote:

>Cleared up an issue with our firewall and now, we can gain
>access to the FTP site from our internal network, using
>the site's domain name. However, attempting to connect
>from a machine outside our internal network results in the
>following:
>
>WS_FTP:
>connecting to 66.xxx.xxx.xxx:1021
>Connected to 66.xxx.xxx.xxx port 1021
>220 MachineName Microsoft FTP Service (Version 4.0).
>USER xxxxxx
>331 Password required for xxxxxx.
>PASS (hidden)
>230 User xxxxxx logged in.
>PWD
>257 "/" is current directory.
>Host type (I): Microsoft NT
>PASV
>227 Entering Passive Mode (192,xxx,xxx,xxx,18,166).
>connecting to 192.xxx.xxx.xxx:4774
>- -
>connecting to 192.xxx.xxx.xxx:4774
>! Connection failed xxx.xxx.xxx.30 - connection timed out
>! connect: error 0
>PORT 205,xxx,xxx,xxx,7,106
>200 PORT command successful.
>LIST
>150 Opening ASCII mode data connection for /bin/ls.
>! Timer cancelled blocking call
>! Accept error: Blocking call cancelled
>! Retrieve of folder listing failed (0)
>
>
>Using Internet Explorer results in the connecting hanging
>on "Getting contents of folder."
>
>I've taken the firewall out of the equation by putting
>this server in a dmz (for now), but I am still not able to
>establish a connection from an external machine.
>
>Are there any tools or utilities that I would be able to
>use that would provide more information?

Thurmus,

Your firewall is still causing the problem. Have you checked the
firewall logs ? Also, which ports have you enabled on your firewall,
both inbound and outbound ?

Your problem sounds like this one to me :

"Common Problems Encountered With FTP
The most common problem encountered when you use FTP over the Internet
results when you attempt transfers through a Network Boundary Securing
Device (NBSD) such as a proxy, firewall, or Network Address
Translation (NAT) device. In most cases the NBSD allows the control
connection to be established over TCP 21 (that is, the user can
successfully log on to the FTP server), but when the user attempts a
data transfer such as DIR, LS, GET, or PUT, the FTP client appears to
stop responding because the NBSD is blocking the data connection port
that is specified by the client. If the NBSD supports logging, you can
verify port blocking by reviewing the deny/reject logs on the NBSD."

http://support.microsoft.com/?id=283679

Regards,

Paul Lynch
MCSE



Relevant Pages

  • Re: Extremely abnormal behaviour: ftp client does show a file list in a folder occasionally
    ... from ftp client and its folder auto searching. ... 250 CWD command successful. ... connecting to xxx.xxx.xx.xx:21 ... 227 Entering Passive Mode. ...
    (microsoft.public.inetserver.iis.ftp)
  • ftp trouble (3) - routing?
    ... Where the 192 address is on my internal network and the xxx address is ... The problem is that when I connect to the ftp server via the 192 address ... 227 Entering Passive Mode ... 150 Here comes the directory listing. ...
    (Fedora)
  • Re: diagnosing possible hardware problem
    ... ftp directories of the location that you are using I noticed multiple ... delays and timeouts connecting (all of my other network connections are ... With other distros, one mirror can be ... usable instructions on how to tell the Ubuntu installer how to use an nfs ...
    (Ubuntu)
  • Re: IP Restrictions
    ... and that's all the information the FTP server has when you connect. ... connecting to one IP address get one server, ... any host can connect when they use the alias address. ...
    (microsoft.public.inetserver.iis.ftp)
  • Troubles using WS_FTP Pro with Zone Alarm Pro under XP
    ... trouble accessing FTP sites using WS_FTP Pro v9.01 with Zone Alarm Pro ... The trouble is that for all sights connecting takes very long, ... I can open a command-prompt and FTP straight away, i.e., I connect ...
    (comp.security.firewalls)