Re: Cannot Connect to FTP Server



I would either: On the Exceptions tab, see if you can enable the program
rather than any specific ports. Or, go to the Advanced page and turn on
logging. See what it reports when you have a failed connection attempt with
21 open.


"Bill Glidden" <billyg1943@xxxxxxxxxxx> wrote in message
news:uy0jASwmGHA.3752@xxxxxxxxxxxxxxxxxxxxxxx
If I disable the Windows firewall, all is OK. If I enable the firewall
and allow TCP port 21 in Exceptions it's not. Is port 20 also required?

"Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23TPpbZsmGHA.3600@xxxxxxxxxxxxxxxxxxxxxxx
Can this be the Windows Firewall on the XP Pro box (the one hosting the
FTP server)?


"Bill Glidden" <billyg1943@xxxxxxxxxxx> wrote in message
news:%23TTW$CqmGHA.140@xxxxxxxxxxxxxxxxxxxxxxx
SBS2003 SP1 Premium (ISA 2004 SP2), Windows XP Pro SP2. I have set up a
test FTP server (Globalscape Secure FTP Server) on a workstation on the
same LAN as the SBS server. Eventually I will move it to a DMZ and allow
internet access. The site is running OK and I can logon to it locally
and create folders, etc. What I can't do is log on from any other PC on
the LAN no matter what I have tried:

1. Local login to PC (also domain login)
2. Disable ISA Firewall client
3. Turn off IE proxy settings

No matter how I try to connect, I get the following:

1. ftp using IE: no login prompt appears and connection just times out
with "server has reset the connection"
2. Command line ftp: no login prompt and then eventually I get
"connection closed by remote host"

I thought it might have something to do with ISA but I have disabled the
proxy and the firewall client and it makes no difference. No matter
what, there is never any port 21 activity in ISA monitor.

I can connect to the FTP PC fileshares from any PC on the LAN.

This is the second FTP server (Titan FTP) I have tried with the same
result.

Can someone please help me with this?










.



Relevant Pages

  • Re: Hacked? External address knocks on internal private address...
    ... The important part of your message is that FTP is allowed out... ... You open a connection to an FTP Server and logon. ... When you ask the server for a file the server issues a "PORT" command ... so it can open a port on the firewall to allow the incoming Data ...
    (comp.security.firewalls)
  • Re: IPSwitch, Inc. WS_FTP Server
    ... > bounce attack as well as PASV connection hijacking. ... > The FTP bounce vulnerability allows a remote attacker to cause the ... > anonymously along with any internal addresses that the FTP server has ... That means it's got to handle a PORT ...
    (Bugtraq)
  • Re: Internet Explorer Keeps Timing out on FTP
    ... > This is a problem with the FTP client. ... When the PORT command is used, the FTP client is asking the FTP server to ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: RMF Spreadsheet Reporter
    ... >PORT statement below do not match my target FTP server.. ... The IP address in the PORT command is the IP address of the FTP *client* ... For IBM-MAIN subscribe / signoff / archive access instructions, ...
    (bit.listserv.ibm-main)
  • Re: Internet Explorer Keeps Timing out on FTP
    ... >> This is a problem with the FTP client. ... I have not started the FTP server ... > client chooses which method to use, by sending either a PORT or PASV ... > command to the server. ...
    (microsoft.public.inetserver.iis.ftp)