"Jason S" <Jason S@discussions.microsoft.com> wrote in message
news:1B789FD7-1F03-4416-8785-161C07354F31@microsoft.com...
> Hi All:
>
> I have a windows server 2003 (SP1) machine located on the same private
> subnet as my workstation. The server is running as an internal Web and FTP
> server using IIS 6 for both services.
>
> My problem is that with the internal Windows Firewall turned on, clients
> can
> not connect to the FTP service with Passive (PASV) mode turned ON (which
> is
> the default setting for IE and our other FTP clients).
>
> With Passive mode turned off, and the firewall turned on everything works
> fine.
>
> With passive mode turned on, and the firewall turned off everything works
> fine.
>
> All other combinations end up with the timeout/could not connect error
> messages when the client tries to get the directory listing.
>
> I have tried configuring the PassivePortRange value in IIS' MetaBase, and
> tried adding those port values to the Exception list - without success.
>
> So my question is this: is there a way to configure IIS and/or the Windows
> Firewall so that the firewall can be on, and allow PASV connections to
> work?
>
> Thanks in advance,
> - Jason