Mm.. so active mode work while passive mode stuck.
Can you try configure passive port range in iis ftp and then allow those
ports in firewall?
How To Configure PassivePortRange In IIS
http://support.microsoft.com/?id=555022 --
Regards,
Bernard Cheah
http://www.iis.net/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] <worldwidenandhu@gmail.com> wrote in message
news:1189159115.608255.196660@22g2000hsm.googlegroups.com...
> hi i am using linux as a gateway to connect inside local machines to
> internet.
>
> linux eth0 :XX.XX.XX.XX
> linux eth1 : 192.168.1.1
>
> inside local FTP Server(Win2k3 IIS) : 192.168.1.200
>
> now i want to forward incoming ftp request on eth0, to acces
> 192.168.1.200 FTP server.
>
> some days before it works well.
> but now, my remote office cant able to connect FTP server through
> Windows explorer (ftp://XX.XX.XX.XX).
> while giving the addrees in above line, the explorer asks for
> password, and then it displays as, "Operation timed out."
>
> only command mode ftp.exe works well (start-run-cmd-ok, ftp open
> XX.XX.XX.XX)
>
> but from my local network, any system can connect the FTP server
> easily (as, ftp://192.168.1.200).
> also, wheni assign the XX.XX.XX.XX ip directly to FTP server, we can
> access it from remote office..
>
> the problem comes only when we connects it through linux firewall.
>
> i used the following lines in the iptables command:,
> **********************************************************************************************************************
> iptables -t nat -A PREROUTING -i eth0 -p tcp - -dport 21 -j DNAT - -
> to 192.168.1.200:21
> iptables -A FORWARD -p tcp -d 192.168.1.200 - -dport 21 -j ACCEPT
> **********************************************************************************************************************
>
> but other http port forwarding works well....
>
> pls tell me the solution for these problem......
>
> Thanks and Regards,
> Nandhakumar K.
>