s_m_b <smb20002ns@hotmail.com> wrote:

> I'm getting this when trying to open an ftp session with a w2k3
> server. The ftp server was set to refuse connections to other than a
> specific (NATed) IP address (server is in a dmz), but I've switched
> to 'allow all' .
> This is also using the admin account/pswd for the server.
> Why would it persist in a 530 error when I'm switched to 'allow all'?

> s_m_b <smb20002ns@hotmail.com> wrote:
>
>> I'm getting this when trying to open an ftp session with a w2k3
>> server. The ftp server was set to refuse connections to other than a
>> specific (NATed) IP address (server is in a dmz), but I've switched
>> to 'allow all' .
>> This is also using the admin account/pswd for the server.
>> Why would it persist in a 530 error when I'm switched to 'allow all'?
>
> Whether the server is in the DMZ or not, IIS does not handle passive
> mode FTP correctly when the server is behind a NAT router. This is
> inherent in IIS and there is no work-around other than forcing all
> clients to use active PORT-mode FTP.
>
> You might do better with other brands of FTP server which are designed
> to work behind NAT.
>

"s_m_b" <smb20002ns@hotmail.com> wrote in message
news:Xns98066A136CB47smb2000nshotrmailcom@207.46.248.16...
> "Robin Walker [MVP]" <rdhw@cam.ac.uk> wrote in
> news:#Uu1aXxqGHA.2464@TK2MSFTNGP03.phx.gbl:
>
>> s_m_b <smb20002ns@hotmail.com> wrote:
>>
>>> I'm getting this when trying to open an ftp session with a w2k3
>>> server. The ftp server was set to refuse connections to other than a
>>> specific (NATed) IP address (server is in a dmz), but I've switched
>>> to 'allow all' .
>>> This is also using the admin account/pswd for the server.
>>> Why would it persist in a 530 error when I'm switched to 'allow all'?
>>
>> Whether the server is in the DMZ or not, IIS does not handle passive
>> mode FTP correctly when the server is behind a NAT router. This is
>> inherent in IIS and there is no work-around other than forcing all
>> clients to use active PORT-mode FTP.
>>
>> You might do better with other brands of FTP server which are designed
>> to work behind NAT.
>>
>
> thanks - useful to know that. Just means I'll have to do the ftp from the
> client that it was set up for.
> Perhaps another irritating bug they'll design out for IIS7?