Groups | Blog | Home
all groups > iis ftp > april 2005 >

iis ftp : Active/PASV SBS 2003 Std problem



Tom Allen
4/5/2005 1:53:20 PM
Hopefully this one will be easy......

I added a couple ftp sites to my SBS 2003 Std server

If I connect to them with IE 6, it will only work with PASV disabled,
Active ftp enabled.........

If I connect to them with ws_ftp or filezilla, I can use PASV just fine.

Any help greatly appreciated

Alun Jones [MSFT]
4/6/2005 8:39:39 AM
[quoted text, click to view]

Some clients will ignore the IP address specified in the PASV response, and
will connect to the port number that the PASV response gives, at the IP
address of the server. This is unreliable behaviour - it might result in
your client connecting to a socket that doesn't map through to the same FTP
session, because the NAT router that is causing the problem in the first
place will be translating ports as well as IP addresses, some of the time.

It's a design decision, whether to go with "works most of the time, but
might be unsecure" or "either works securely or not at all". The method
that the Internet Explorer FTP client code uses is the latter - it either
works securely or not at all.

The solution to this is to make sure that all of your FTP sites run on port
21, or to configure your NAT to recognise FTP traffic on ports other than
21. At present, I'm not aware of any consumer NAT routers that can be
configured in such a manner - but if you pester your NAT router vendor, they
may eventually implement such a feature.

Alun.
~~~~

AddThis Social Bookmark Button