all groups > iis ftp > october 2004 >
You're in the

iis ftp

group:

Error 426 when connecting to virtual directory



Error 426 when connecting to virtual directory Mike R.
10/10/2004 1:49:01 PM
iis ftp: I am running SBS 2003 without ISA. I have a linksys router to direct incoming
traffics to my server. (Note: I have two NICs on this server: Local NIC and
External NIC).

On my Firewall I have forwarded ports 20 and 21 to my server's External NIC.
I also enabled FTP from SBS firewall.

I also created a ftp users group and added this group to "Domain Controller
Security Policy" under "Allow Log on Locally" and made my FTP user to be part
of this group.

Now when I use a FTP client I am getting this error:
426 Connection closed; transfer aborted.

Am I missing something here?

Can someone please guide me as far as how to confgure my ftp users with IIS
6 on SBS 2003 server and an external firewall?

Thanks alot,

Mike

Re: Error 426 when connecting to virtual directory Mike R.
10/11/2004 7:13:04 AM
Bernard,

Thanks for your reply.
Now I can't even connect to my server!!!
Here is the new error message:

C:\ftp domain.com
Connected to domain.com.
Connection closed by remote host.

I have no clue what's going on.
Port 20 and 21 are open.

Thanks,

Mike

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Mike R.
10/11/2004 9:11:08 AM
Internally it is working.

I think I just need active mode.

FTP IP gives me the same issue.

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Bernard
10/11/2004 3:47:51 PM
Sounds like passive mode issue again.
if you try command prompt ftp.exe from remote host,
can you login ? and do dir listing ?

For passive mode to work, you need to open certain port range.
read -
Information About the IIS File Transmission Protocol (FTP) Service
http://support.microsoft.com/?id=283679
How To Configure PassivePortRange In IIS
http://support.microsoft.com/?id=555022

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Mike R.
10/11/2004 9:59:09 PM
from outside (ftp public ip)

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Bernard
10/12/2004 12:01:09 AM
what did you changed ?
first - always test internally and locally first.
try ftp at the server, make sure everything is running, then test remote
connection.

You only need inbound 21 and outbound 20 (active mode)
for passive mode, 21 + outbound passive port range.

also try ftp using IP address to skip the host name resolution.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 7:15:04 AM
C:\Documents and Settings\mike>ftp publicip
Connected to publicip.
Connection closed by remote host.

log:
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-10-11 02:00:16
#Fields: time c-ip cs-method cs-uri-stem sc-status sc-win32-status
02:00:16 192.168.16.2 [2]USER administrator 331 0
02:00:20 192.168.16.2 [2]PASS - 230 0
02:02:55 192.168.16.2 [2]closed - 421 121
02:24:55 192.168.16.11 [4]closed - 421 121



[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Alun Jones [MSFT]
10/12/2004 9:24:59 AM
[quoted text, click to view]

421 is a different error from 426. 421 is used to indicate a closure of the
control connection, whereas 426 is used for closing the data connection.
The win32-status field gives you some further information, which can be
gleaned from "net helpmsg 121" - that tells you:

"The semaphore timeout period has expired."

Ignore, for now, the technical term "semaphore", and concentrate, instead,
on the word "timeout". Now go back and look at the log, and you'll see that
two and a half minutes, and no commands, came between the logon (USER and
PASS commands) and the time when you were disconnected for no activity.
This seems like everything's working as it should on the server's side.

426, on the other hand, is a very common error now that the world uses
firewalls and NATs - which one are we debugging right now?

Alun.
~~~~

Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 9:45:03 AM
Thank you Alun for your reply,

First when I started configuring my ftp server it gave me error 426 and
after couple days the error changed to 421.

How can I give you more information so we can troubleshoot this problem? Any
logs that you need to look at? Please let me know.

Thanks,

Mike



[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Alun Jones [MSFT]
10/12/2004 9:53:03 AM
[quoted text, click to view]

When you use ftp.exe, and get the 421 error logged, what commands are you
typing at the "ftp>" prompt? At the moment, it looks like all you're doing
is entering your username and password, then not sending any more commands.

Alun.
~~~~

Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 10:07:03 AM
ftp> open publicip
Connected to publicip
Connection closed by remote host.

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Alun Jones [MSFT]
10/12/2004 11:11:05 AM
That doesn't fit with the log entry that shows you sent a user name
("administrator") and a password.

Alun.
~~~~

[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Bernard
10/12/2004 11:24:19 AM
Ok, so from remote machine you try:
ftp.exe yourserverip

where do you experienced 426 error ?

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 1:19:02 PM
Huh!!
I think the log wasn't updated at that time:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-10-12 16:39:15
#Fields: time c-ip cs-method cs-uri-stem sc-status sc-win32-status
16:39:15 192.168.1.10 [6]closed - 421 121



[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Alun Jones [MSFT]
10/12/2004 1:27:14 PM
Under the properties for that FTP site, select the "Directory Security"
tab - what are the settings on that page? Is it possible that you've denied
access from outside here?

Alun.
~~~~

[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Bernard
10/12/2004 2:10:43 PM
Can you post the log ?
Connecting to ...
220 Microsoft FTP Service
.....

also IIS FTP log as well.



--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 2:19:07 PM
[quoted text, click to view]

Granted Access

Is it possible that you've denied
[quoted text, click to view]

Are you talking about my firewall?
Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 2:27:05 PM
I disabled VPN tunel on my firewall and i was abled to get little bit deep
this time. Here is my current log:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-10-12 21:20:43
#Fields: time c-ip cs-method cs-uri-stem sc-status sc-win32-status
21:20:43 ip [1]USER mike 331 0
21:20:44 ip [1]PASS - 530 5
21:21:33 ip [1]QUIT - 530 0
21:21:45 ip [2]USER mike 331 0
21:21:46 ip [2]PASS - 530 5

Here is the ftp command:
C:\Documents and Settings\mike>ftp ip
Connected to ip.
220-Microsoft FTP Service
220 domain
User (ip:(none)): mike
331 Password required for mike.
Password:
530 User mike cannot log in, home directory inaccessible.
Login failed.
ftp>


Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 2:39:28 PM
I am logged in now :)
I added read access to the Default FTP and that fixed it so I think that VPN
settings on my firewall caused this!

I mentioned at the beginning of this forum that each ftp user is part of the
"Log on Locally" of this domain server. Is this ok?

Thanks a lot for all your helps,

Mike


[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 2:47:02 PM
Now I can't upload anything (Access Denied):
ftp> send c:\t.txt
200 PORT command successful.
550 t.txt: Access is denied.



[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Mike R.
10/12/2004 9:59:02 PM
Bernard,

The problem was the NTFS as you said. Thank you so much for your time.

By any chance do you know what are the default permissions for a web folder?

Thanks,

Mike

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Mike R.
10/13/2004 7:09:09 AM
That was exactly what I was looking for.

You are the best.

Thanks so much man.

Have a good one.

Mike

[quoted text, click to view]
Re: Error 426 when connecting to virtual directory Bernard
10/13/2004 12:26:50 PM
you ftp from internal to public IP ?
it looks like blocking...


--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Bernard
10/13/2004 12:28:12 PM
Make sure the user has write NTFS permission.

and the write property of the ftp site is checked.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Bernard
10/13/2004 12:29:40 PM
If you are using IIS6.0, this privilege is not longer needed.
as it has changed to network_cleartext rather than local logon.

For IIS5.1 and below, this is required.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Re: Error 426 when connecting to virtual directory Bernard
10/13/2004 2:51:23 PM
Try -
Default permissions and user rights for IIS 6.0
http://support.microsoft.com/?id=812614

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

AddThis Social Bookmark Button