RE: External FTP access problem.



Hi Gavin,

Thank you for posting in SBS newsgroup.

>From the description, I understand the issue to be: The LAN clients of SBS
can not access external FTP server and receive error 500, however, you can
access FTP server on SBS. If I have misunderstood your concerns, please do
not hesitate to let me know.

Please check if the following KB article will be help:

884580 Active mode FTP client programs cannot access an FTP server from
behind
http://support.microsoft.com/?id=884580

If the problem still occurs, would you please help to confirm the following
points?

1. Which ISA version did you install on the SBS server, ISA 2000 or ISA
2004?
2. Can you use the Ftp.exe command-line FTP client program to access the
FTP server?
3. What FTP client you are using? Can I assume that you are using Internet
Explorer? Is the firewall client installed on the client computers? You may
try to disable the firewall client and only put the Proxy settings in IE to
see if you can access the FTP site.
4. Open ISA Management console, navigate to Configuration\Add-ins. Make
sure that the FTP Access Filter is enabled.
5. If you are using IE as the FTP client, please try to modify the IE to
test the FTP in different client mode. Open Internet Explorer, click
'Tools'->'Internet Options'. In 'Advanced' tab, modify the settings and
then try the FTP access:

a. Check ''Enable folder view for FTP site'' option; uncheck ''Use Passive
FTP'' option (The IE will work in Active mode FTP)
b. Uncheck ''Enable folder view for FTP site'' option; check ''Use Passive
FTP'' option (The IE will work in Passive mode FTP)

You may also refer to the KB 323446:

323446 How to configure Internet Explorer to use both the FTP PORT mode and
the
http://support.microsoft.com/?id=323446

When you configure the clients to use FTP PASV Mode, please also configure
ISA to use Passive mode:

300641 HOW TO: Enable Passive CERN FTP Connections Through Internet Security
http://support.microsoft.com/?id=300641

6. Please also re-run CEICW based on the following KB article and make
sure you have selected FTP on Services Configuration page to see if the
problem can be resolved:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Thanks for your taking time to help me collect the above information and I
look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: External FTP access problem.
|
| From: "=?Utf-8?B?R2F2aW4gLSBNQ1NFMks=?="
<GavinMCSE2K@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: External FTP access problem.
| Date: Thu, 24 Nov 2005 11:46:17 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi,
|
| I have a newly installed 2003 SBS server on an old network.
|
| Its set up with two network cards, one for the internal LAN and one for
the
| WAN, using RRAS to link the two.
|
| ISA is yet to be put on the server.
|
| All clients (Win98 and XP Pro) access the LAN fine and internet requests
all
| work fine bar one.
|
| If a client PC tries to access any FTP server the connection fails with a
| 500 error. I have copied the full transcript below as an example.
|
| The server itself can successfully connect to any FTP server and get
files.
|
| All the ports have been opened on the server, and I have even turn the
| firewall off to try and se if that resolves issues.
|
| HELP!
|
| --
| C:\>ftp
| ftp> o
| To ftp.microsoft.com
| Connected to ftp.microsoft.com.
| 220 Microsoft FTP Service
| User (ftp.microsoft.com:(none)): anonymous
| 331 Anonymous access allowed, send identity (e-mail name) as password.
| Password:
| 230-Welcome to ftp.microsoft.com. Please also visit
| http://www.microsoft.com/do
| wnloads.
| 230 Anonymous user logged in.
| ftp> dir
| 500 Invalid PORT Command.
| 150 Opening ASCII mode data connection for /bin/ls.
|
| --
|

.



Relevant Pages

  • Re: ipfw or ipf w/stateful behavior
    ... these make the firewall secure enaugh. ... > hosting a FTP server at your site? ... Securing things for an FTP client ...
    (FreeBSD-Security)
  • Re: Is this a 3-Leg Perimeter scenario?
    ... I was able to access the FTP server following your ... instructions for changes to the client, but did not really want to have ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP server
    ... thank you for using Microsoft newsgroup. ... | So my ftp site is up and running now and is a litlle bit secure. ... |> Regarding how to secure the FTP server, ...
    (microsoft.public.windows.server.sbs)
  • Re: ftp hangs
    ... But I have just used the same Solaris 10 ftp client and connected to the HP C3600's ftp server. ... it possible that it just defaults to passive mode so that the command to ... No, I can't be sure about the HP ftp server, but I tried both with and without the "passive" command from Sun's ftp client and find it works with the HP server in either case. ...
    (comp.unix.solaris)
  • RE: FTP from MAC Clients
    ... not access the FTP server in SBS 2003 premium environment. ... Navigate to Firewall Policy, locate your custom FTP access rule, right ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)

Loading