Groups | Blog | Home
all groups > iis ftp > september 2004 >

iis ftp : Problem with accessing FTP server setup on Windows 2003 server


Marcin Michalek
9/8/2004 7:05:40 AM

I set up FTP server on windows 2003 server using IIS ver.6.0. I di not
allow anonymous connection so everything is based on username and
password. I added all the accounts to my FTP home folder so whoever is
accessing my ftp has a full permission. Everything seems to be working
fine when i try to login using Command Prompt but when I try IE ( ver.
6.0) it gives me error Message.

An error occurred opening that Folder on the FTP server. Make sure you
have permission to open that folder

Details:
200 Type se to A.
227 Entering Passive Mode.
426 Connection closed; Transfer Aborted.

I'm not sure what i'm doing wrong. My FTP i set to port 21 . I'm behind
LinkSyS router but i forwarded ports 21 and 20 both TCP and UDP. PLEASE
HELP... BTW i also have set up WEb server using iis and they work just
fine.


*** Sent via Developersdex http://www.developersdex.com ***
Marcin Michalek
9/8/2004 10:23:28 AM

Thx for the replay Jeff. I accually already check this. BTW i don;t
think it's a IE problem. I think it's the server 2003 cause It work fine
on Anonymous but it doesn't work with user name and password. Not sure
what's going on. I also have Active directory set up on this server but
i don;t think that would have anything do to with getting access to ftp
folders.


*** Sent via Developersdex http://www.developersdex.com ***
Alun Jones [MSFT]
9/8/2004 11:19:23 AM
[quoted text, click to view]

Try it with a bunch of different FTP clients, to see if this is a client
problem or a server problem.

FTP support in Internet Explorer is not perhaps as fully featured as you
will get from a dedicated FTP client, because Internet Explorer is primarily
a web browser, and the FTP client implementation has to bend a little to fit
that model.

That it works with the command line FTP client shows that client behaviour
is at least part of the problem here. The big difference between the
command line FTP client and Internet Explorer, at least in terms of the
behaviour you describe, is that the command line client uses active mode,
and the Internet Explorer implementation defaults to passive mode for file
transfers (though it can be made to use active mode). While the command
line client can't be made to use passive mode, all of the third party FTP
clients I've tried have an ability to use it (they were designed more
recently than the command line client).

From the error message you've posted, this looks like the most common
problem for FTP - firewalls. You have a firewall that's open to incoming
connection requests on port 21, but not on ports 1024-5000. Those are the
ports chosen by default for the server to bind to when it creates a passive
mode socket to listen on. On IIS 6, you can change that range, if you'd
like to move it somewhere a little less open for abuse, but you will need to
open up a range of ports for incoming connections.

The message that you are getting has nothing to do with what user you are
logged in as, or what rights that user has - it is my guess that you are
mis-remembering in your assertion that it works as anonymous in the same
circumstance, or that you simply ran into a fortuitous collision between
ports opened in your firewall for other reasons, and ports opened by the FTP
server.

Alun.
~~~~

jeff.nospam NO[at]SPAM zina.com
9/8/2004 3:53:36 PM
On Wed, 08 Sep 2004 07:05:40 -0700, Marcin Michalek
[quoted text, click to view]

Maybe:

How To Configure Internet Explorer to Use Both the FTP PORT Mode and
the FTP PASV Mode in the Windows Server 2003 Family:
http://support.microsoft.com/default.aspx?scid=kb;en-us;323446

Marcin Michalek
9/8/2004 8:42:43 PM
Thx for the replays... I think I have firewall problems. If IE is using
the range between 1024 and 50000 than I know what the problem is .. .I
actually forwarded ports between 50000 and 50700 for passive but I think
I was wrong. Let me try forwarding all the ports just for testing
purpose and I’ll get back to you with the results.



*** Sent via Developersdex http://www.developersdex.com ***
jeff.nospam NO[at]SPAM zina.com
9/8/2004 9:13:16 PM
On Wed, 08 Sep 2004 10:23:28 -0700, Marcin Michalek
[quoted text, click to view]

I thought it worked from a command line but not IE. And you were
running into a passive/active issue, which IE is known to have
problems with. Are you behind a firewall that may not have ports
available for passive mode?

Alun Jones [MSFT]
9/9/2004 9:50:03 AM
[quoted text, click to view]

The range chosen by default is 1024 - 5000, not 50000. Only if you've
correctly set the passive port range in the metabase (note - the metabase,
not the registry, for IIS 6) will you be able to access another range.
After you've configured the entry, restart the FTP service, and check that
the ports being given out are correct. You can do this through the command
line FTP client by logging on and entering the command "quote pasv". You'll
see something like this:

ftp> quote pasv
227 Entering Passive Mode (127,0,0,1,9,161).

In this case, the port is represented by the last two numbers - to convert
to the numerical value, you multiply the first number by 256 and add the
result to the last number. In this case, for instance, you can see
9*256+161 = 2465. And that's expected, because this is an unmodified
server, and so the port value is going to be chosen between 1024 and 5000.

Alun.
~~~~

Bernard
9/9/2004 11:08:47 AM
This is a FAQ -
http://groups.google.com/groups?q=support.microsoft.com%2F%3Fid%3D555022&ie=UTF-8&hl=en


--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

AddThis Social Bookmark Button