Re: Extremely abnormal behaviour: ftp client does show a file list in a folder occasionally

1) yes, this is for outbound. so that's fine

2) yes. from the first log u see the port range is within the range.

3) the 2nd port range setting command is not working, you need to restart
IIS FTP to take effects.

Now, you problem so far, I'm seeing is port blocking, as if u disable
firewall it is working.

so did you unblock thos port range?

next, to go back to default just delete the setting or set it to "" for
none.


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"kevin" <ocean_chen@xxxxxxxxxxx> wrote in message
news:1173242657.759132.102190@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
(1). I removed ftp.exe from firewall exception list first, and then
tested ftp.exe again on the Server locally. (Inetinfo.exe is still
enabled on the firewall exception list.) It works except that as soon
as I issue a ftp command, a Windows Security Alert window will pop up
saying "To help protect your computer, Windows Firewall has blocked
some features of this program". It asked me to keep blocking or
unlock. I guess this is just the way it works.

(2). Then I set up the PassivePortRange In IIS, exactly as you
described there. I issued a command
CScript.exe adsutil.vbs set /MSFTPSVC/PassivePortRange "5004-5700"
The output displays all fine.

Restarted the FTP service and/or the server.

Next, go to a client machine for testing FTP again - the problem still
persists! A log from WS_FTP is as follows:

========================================
257 "/" is current directory.
Host type (I): Microsoft NT
PASV
227 Entering Passive Mode (xxx,xxx,xx,xx,19,149).
connecting to xxx.xxx.xx.xx:5013
- -
connecting to xxx.xxx.xx.xx:5013
Connected to xxx.xxx.xx.xx port 5013
LIST
125 Data connection already open; Transfer starting.
Received 5204 bytes in 0.1 secs, (500.00 Kbps), transfer succeeded
226 Transfer complete.
CWD tmp1 <====
250 CWD command successful.
PWD
257 "/tmp1" is current directory.
PASV
227 Entering Passive Mode (xxx,xxx,xx,xx,19,150).
connecting to xxx.xxx.xx.xx:5014
- -
connecting to xxx.xxx.xx.xx:5014
Connected to xxx.xxx.xx.xx port 5014
LIST
125 Data connection already open; Transfer starting.

(it is hanging there after the same amount of 2920 bytes has been
transferred.)

====================================================
Also tested with this cmd
CScript.exe adsutil.vbs set /MSFTPSVC/PassivePortRange "5500-5700"
The same ftp problem. The WS_FTP log still displays something like
connecting to xxx.xxx.xx.xx:5006
Connected to xxx.xxx.xx.xx port 5006
LIST
125 Data connection already open; Transfer starting.
...(hanging)

//
Really need enough patience for this problem. It is like an
untreatable virus for some patients in life, and one just has to live
with it?

Any further suggestion is always appreciated. If it does not work, how
could I disable this PassivePortRange setup, and go back to previous
setting? Thanks.









.

Relevant Pages

  • Re: 500 "LPRT 6,16,0,0,0,0...,34,113,2,7,184 New Information
    ... Try change it to port 21 and test again. ... if ftp is not bind to default port. ... >>Cleared up an issue with our firewall and now, ... >>connecting to 192.xxx.xxx.xxx:4774 ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: FTP Server on Win XP Pro
    ... >connecting to 192.168.1.104:1434 ... This looks like you're running into a problem with your NAT router. ... external IP and port - but only if they know that you are running FTP. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ftp LIST in C
    ... >ftp server. ... >Connecting is simple, after assigni used only: ... >i don't know how can i know which port number? ...
    (comp.unix.programmer)
  • Re: Connecting to FTP server through Winroute
    ... > I am having problems connecting to an ftp server through my local ... > of this server and he has noted that he is behind a firewall but has ... > had no problem connecting to it from other sites except one. ... specified data port, thereby defeating PASV mode. ...
    (comp.security.firewalls)
  • Re: Passive Mode issue
    ... It falls within the specified port range, even with windows firewall disabled ... I have that port range specified for that IP in the Sonicwall. ... and the ftp site is bound to a specific public ...
    (microsoft.public.inetserver.iis.ftp)