Re: compare iis-ftp and serv-u.
From: Elga (Elga_at_discussions.microsoft.com)
Date: 02/14/05
- Next message: Jeff Cochran: "Re: two FTP sites on same server?"
- Previous message: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- In reply to: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- Next in thread: Jeff Cochran: "Re: compare iis-ftp and serv-u."
- Reply: Jeff Cochran: "Re: compare iis-ftp and serv-u."
- Reply: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 14 Feb 2005 15:29:04 -0800
First, it wasn't my intention to be unpolite. I appreciated the help I
receved in this forum when I began to work with IIS. If it was the
consequence of my post, I apologyze.
But, I don't agree with the idea of this is a NAT's issue.
NAT have to translate internal IP to external IP (and viceversa) in the
header of IP message, but does not have to do with the body of thar message.
So, if some NAT manufacturer wants to give an special treatment to the body
of the answer to PASV command, it's cool, but it is not mandatory.
Because of this, there are many NATs that don't do it. Then, the FTP server
software needs to know the external IP in order to send the right answer to
the client, in this cases.
I have no doubt that a Win2003 is a great product (including IIS). But the
existence of different products to fit necesities of different clients, is
the best thing of capitalist system.
Best regards,
Elga.
"Alun Jones [MSFT]" wrote:
> "Elga" <Elga@discussions.microsoft.com> wrote in message
> news:FE9BED55-51E5-4F21-B829-2AD4800BD819@microsoft.com...
> >I bought Windows 2003 Standard Edition with the main goal of having a FTP
> >site.
> > But my server is behind a router/NAT, and when some client tried to
> > connect
> > in passive mode, the IIS-FTP sent him the local IP, instead of the
> > external
> > (valid) IP.
> > I search a lot about this issue, (even in this forum) and the conclussion
> > was that there is no way to configure the IIS ftp server to send an
> > external
> > IP instead of the local IP, when it is behind a NAT.
>
> Actually, the conclusion was that this is the NAT's job. It, after all,
> knows what its external address is, what its range of internal addresses is,
> and what external ports are mapped to what internal ports. If the FTP
> server guesses this for you, you have to assume that the NAT is not mapping
> port numbers, which could be a dangerous assumption, and may lead to
> security failures.
>
> > Serv-U has a complete support for passive mode connection: setting of
> > external IP, passive port range, etc.
>
> As noted, setting the external IP is unnecessary and inappropriate; the
> passive port range setting that you talk of is already available in the IIS
> FTP server.
>
> Alun.
> ~~~~
> --
> Software Design Engineer, Internet Information Server (FTP)
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
- Next message: Jeff Cochran: "Re: two FTP sites on same server?"
- Previous message: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- In reply to: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- Next in thread: Jeff Cochran: "Re: compare iis-ftp and serv-u."
- Reply: Jeff Cochran: "Re: compare iis-ftp and serv-u."
- Reply: Alun Jones [MSFT]: "Re: compare iis-ftp and serv-u."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
