Re: 500 "LPRT 6,16,0,0,0,0...,34,113,2,7,184' New Information

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 04/20/04 

Date: Tue, 20 Apr 2004 14:00:38 +0800

Add on - as mentioned in previous post.
Try change it to port 21 and test again.

This is cause by NAT that doesn't translate correctly
if ftp is not bind to default port. 

-- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"Paul Lynch" <paul.lynch@nospam.com> wrote in message
news:fk9880hmi862uhsu47f6euu1td5pkm7g7t@4ax.com...
> On Mon, 19 Apr 2004 11:44:52 -0700, "Thurmus"
> <anonymous@discussions.microsoft.com> wrote:
>
> >Cleared up an issue with our firewall and now, we can gain
> >access to the FTP site from our internal network, using
> >the site's domain name. However, attempting to connect
> >from a machine outside our internal network results in the
> >following:
> >
> >WS_FTP:
> >connecting to 66.xxx.xxx.xxx:1021
> >Connected to 66.xxx.xxx.xxx port 1021
> >220 MachineName Microsoft FTP Service (Version 4.0).
> >USER xxxxxx
> >331 Password required for xxxxxx.
> >PASS (hidden)
> >230 User xxxxxx logged in.
> >PWD
> >257 "/" is current directory.
> >Host type (I): Microsoft NT
> >PASV
> >227 Entering Passive Mode (192,xxx,xxx,xxx,18,166).
> >connecting to 192.xxx.xxx.xxx:4774
> >- -
> >connecting to 192.xxx.xxx.xxx:4774
> >! Connection failed xxx.xxx.xxx.30 - connection timed out
> >! connect: error 0
> >PORT 205,xxx,xxx,xxx,7,106
> >200 PORT command successful.
> >LIST
> >150 Opening ASCII mode data connection for /bin/ls.
> >! Timer cancelled blocking call
> >! Accept error: Blocking call cancelled
> >! Retrieve of folder listing failed (0)
> >
> >
> >Using Internet Explorer results in the connecting hanging
> >on "Getting contents of folder."
> >
> >I've taken the firewall out of the equation by putting
> >this server in a dmz (for now), but I am still not able to
> >establish a connection from an external machine.
> >
> >Are there any tools or utilities that I would be able to
> >use that would provide more information?
>
> Thurmus,
>
> Your firewall is still causing the problem. Have you checked the
> firewall logs ? Also, which ports have you enabled on your firewall,
> both inbound and outbound ?
>
> Your problem sounds like this one to me :
>
> "Common Problems Encountered With FTP
> The most common problem encountered when you use FTP over the Internet
> results when you attempt transfers through a Network Boundary Securing
> Device (NBSD) such as a proxy, firewall, or Network Address
> Translation (NAT) device. In most cases the NBSD allows the control
> connection to be established over TCP 21 (that is, the user can
> successfully log on to the FTP server), but when the user attempts a
> data transfer such as DIR, LS, GET, or PUT, the FTP client appears to
> stop responding because the NBSD is blocking the data connection port
> that is specified by the client. If the NBSD supports logging, you can
> verify port blocking by reviewing the deny/reject logs on the NBSD."
>
> http://support.microsoft.com/?id=283679
>
>
> Regards,
>
> Paul Lynch
> MCSE

Relevant Pages

  • Re: Hacked? External address knocks on internal private address...
    ... The important part of your message is that FTP is allowed out... ... You open a connection to an FTP Server and logon. ... When you ask the server for a file the server issues a "PORT" command ... so it can open a port on the firewall to allow the incoming Data ...
    (comp.security.firewalls)
  • RE: FTP Window of opportunity?
    ... does it seemingly accept the connections and drop them once the response ... Subject: FTP Window of opportunity? ... blocked by the firewall. ... the FTP port shows up. ...
    (Pen-Test)
  • RE: FTP Window of opportunity?
    ... target on the line when in reality it was just a firewall lying to them. ... The connection connects and then immediately ... Subject: FTP Window of opportunity? ... the FTP port shows up. ...
    (Pen-Test)
  • Re: FTP error using a MAC
    ... Yes, you are using active mode, but the firewall/NAT can't take care of it ... behind a firewall, you then told me to change to active mode? ... In active mode the FTP client connects from a random unprivileged port N ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: site stopped working
    ... ok, windows firewall is NOT running, when i checked it there was a message ... when i open the ftp connection to the site in ftp.exe at the command line i ... i tried just changing the ftp port to 22, and that didn't do anything, ... Bernard Cheah ...
    (microsoft.public.inetserver.iis.ftp)