Re: Passive Mode issue

If i do a quote pasv it passes both internal and externally from the network.
What does that mean?

"Bernard Cheah [MVP]" wrote:

if you do a quote pasv in ftp.exe. does the calculation falls inside the
range ?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Synapse120" <Synapse120@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FC0D3815-1E41-4633-9C0D-752CCB2639C7@xxxxxxxxxxxxxxxx
In IIS i set the passive port range for 5500 - 5550, and opened those
ports
in the windows firewall and the network firewall with the same results.
The
Server is in the DMZ, and the ftp site is bound to a specific public IP.
Internally and externally the site only works in active mode, Command line
ftp works, telnet connection to force passive results in connection lost
by
remote host. From the Server it self browsing works in passive and
active.
The clients recieve FTP operation Timed out. I have the time out set to
400
right now.

"Bernard Cheah [MVP]" wrote:

what port range you set ? without firewall locally does it works?
and without firewall - remotely on the same LAN, does it works?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Synapse120" <Synapse120@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:861E4B30-9D70-4E46-BA0B-4B76159B7BB9@xxxxxxxxxxxxxxxx
I am running Windows 2003 r2 x64 SP2, and IIS 6 with 2 ftp sites and a
website running. The problem i see is fully related to passive mode
FTP,
and
my firewall configuration. All users inside and outside can connect if
they
turn off passive FTP from IE or use a ftp client such as winSCP.

The server will timeout from all users trying passive mode. I have set
the
passive port range for IIS and opened those ports in the firewall, with
no
luck.

One special configuration i must note is the wan IP's for the 3 sites
are
all run from the same NIC.

I have opened up all ports to that specific IP for the ftp sites and
still
fails on pasv mode, and windows firewall turned off as well. The
clients
return connection timeout when using passive mode. I have seen other
posts,
with similar symptoms but, non of the suggestions seem to help.

I cant put my finger on what i am missing on the config. Someone
please
help.

thank you,






.

Relevant Pages

  • Re: FTP server behind a PF firewall (including NAT)
    ... Philip> have exactly the same problem. ... Philip> huge range of high ports, and I can't find any information ... IPFW is a real pain compared to most modern firewall software. ... address-translate) the FTP data transfers. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Newbie question about ports.
    ... Can you do a CVSup to update your ports via http? ... Cvsup does not support http, but neither does it use ftp (see man cvsup, ... openable through your firewall. ...
    (freebsd-questions)
  • Re: Passive Mode issue
    ... Bernard Cheah ... windows firewall for ftp, so it does fail with the firewall enabled, this ... Normally the FTP site is bound to the public IP, ... firewall ports, but i think i have all those correct. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: FTP server behind a PF firewall (including NAT)
    ... > Thank you, but I have a working PF configuration for FTP clients, both ... > for active and passive mode. ... > this firewall) that allows both active mode and passive mode clients. ... > Active-mode transfers are the easiest (again, allow connections to all ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Windows XP and FTP
    ... Thank you for your suggestion - I have tried this, and unfortunately opening ports 20 & 21 on the firewall as an exception does not seem to make a difference, even after a restart of both the connection and the client machine itself. ... Subject: Windows XP and FTP ... > are using explorer as their FTP client, I have them enable Passive FTP ...
    (Security-Basics)