Groups | Blog | Home
all groups > iis ftp > september 2007 >

iis ftp : FTP port forwarding problem.


worldwidenandhu NO[at]SPAM gmail.com
9/7/2007 2:58:35 AM
hi i am using linux as a gateway to connect inside local machines to
internet.

linux eth0 :XX.XX.XX.XX
linux eth1 : 192.168.1.1

inside local FTP Server(Win2k3 IIS) : 192.168.1.200

now i want to forward incoming ftp request on eth0, to acces
192.168.1.200 FTP server.

some days before it works well.
but now, my remote office cant able to connect FTP server through
Windows explorer (ftp://XX.XX.XX.XX).
while giving the addrees in above line, the explorer asks for
password, and then it displays as, "Operation timed out."

only command mode ftp.exe works well (start-run-cmd-ok, ftp open
XX.XX.XX.XX)

but from my local network, any system can connect the FTP server
easily (as, ftp://192.168.1.200).
also, wheni assign the XX.XX.XX.XX ip directly to FTP server, we can
access it from remote office..

the problem comes only when we connects it through linux firewall.

i used the following lines in the iptables command:,
**********************************************************************************************************************
iptables -t nat -A PREROUTING -i eth0 -p tcp - -dport 21 -j DNAT - -
to 192.168.1.200:21
iptables -A FORWARD -p tcp -d 192.168.1.200 - -dport 21 -j ACCEPT
**********************************************************************************************************************

but other http port forwarding works well....

pls tell me the solution for these problem......

Thanks and Regards,
Nandhakumar K.
Bernard Cheah [MVP]
9/17/2007 12:00:00 AM
Mm.. so active mode work while passive mode stuck.
Can you try configure passive port range in iis ftp and then allow those
ports in firewall?

How To Configure PassivePortRange In IIS
http://support.microsoft.com/?id=555022


--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button