Groups | Blog | Home
all groups > iis ftp > april 2005 >

iis ftp : Cannot setup second/third ftp site no matter what


Alun Jones [MSFT]
4/4/2005 1:43:53 PM
If the client is behind a NAT router, this is a natural consequence of
running your FTP server on a port other than 21 - the NAT router can't tell
that the traffic is FTP, and therefore doesn't translate the PORT command
containing the client's internal IP address and port into an external IP
address and port. Configure your client to use PASV instead of PORT - this
is usually done by using a configuration switch that puts the client into
using "passive mode".

Alun.
~~~~
--
Software Design Engineer, Internet Information Server (FTP)
This posting is provided "AS IS" with no warranties, and confers no rights.
[quoted text, click to view]

Tom Allen
4/4/2005 2:21:00 PM
Anyone know where to go from here?

I am running SBS 2003 Std, want to set up another couple
ftp sites on different ports and I cannot. When I do and try
to initiate, this is the error.

Details:
200 Type set to A
500 Invalid PORT Command
500 'LPRT 6,16,0,0,0,0,0,0,0,0,255,255,255,255,232,241,56,3,2,14,42':
command not understood


Please help!

I have set microsoft article 555022, just don't want to initiate it
because it is a large security hole, isn't it?

Tom Allen
4/4/2005 2:25:26 PM
Oh, and yes, my first add-on ftp site is set to port 1040
1035-1040 open on hardware firewall.



[quoted text, click to view]

Alun Jones [MSFT]
4/4/2005 5:50:14 PM
The same reason as I posted earlier, but this time the NAT's afflicting the
server, not the client.

If your server is behind a NAT, and is not running on port 21, the NAT will
not know to change the internal IP address and port in the response to the
PASV command.

The two steps you have outlined below are necessary to make IE use active
mode - the PORT command - to connect to the server.

This is a general problem with running FTP servers behind NATs on ports
other than 21 - most NATs cannot be configured to watch for FTP traffic on
ports other than 21.

Alun.
~~~~
--
Software Design Engineer, Internet Information Server (FTP)
This posting is provided "AS IS" with no warranties, and confers no rights.

[quoted text, click to view]

Alun Jones [MSFT]
4/4/2005 5:50:51 PM
The problem is with the NAT being unable to recognise FTP traffic on ports
other than 21. Changing your FTP server will not address that.

Alun.
~~~~

--
Software Design Engineer, Internet Information Server (FTP)
This posting is provided "AS IS" with no warranties, and confers no rights.

[quoted text, click to view]

Tom Allen
4/4/2005 6:42:54 PM
Ok, got my ftp to work testing with ftp from dos.....

Don't understand why.....

I can get to my site just fine from ftp in dos. If I try to
use IE on XP Sp2, it fails miserably unless I "use folder
view for ftp sites" and "disable" pasv in IE options.

Can you elaborate why?


Tom Allen
IT Administrator
South Burlington, VT



[quoted text, click to view]

news.microsoft.com
4/4/2005 8:28:02 PM
Just got home from work, not working, ready to give up
and start exploring much better ftp servers.



[quoted text, click to view]

AddThis Social Bookmark Button