Can't get FTP to work on Windows Server 2008

I am able to connect to the server while on the local network; however, when I try from an external computer, I cannot log in.

That makes me think that the firewall is blocking FTP traffic, but if I forward port 21 to another computer behind the server (and thus behind the firewall) that has a separate FTP server running, I can connect to that.

Please help!
Who is Participating?
aesdttConnect With a Mentor Author Commented:
Finally figured it out!  It is the Application Layer Gateway service...saw on another forum that it causes problems with FTP, so I stopped it and the FTP worked.  Restarting the service did not cause further problems, so now I just need to figure out 1) what it is doing to prohibit FTP, and 2) do I need that service for anything else...
aesdttAuthor Commented:
One other thing I have noticed:

From behind the Win2k8 server (whose DNS name is, I can connect to most of my usual FTP sites - however, when I try connecting to our web server through FTP at, I am unable to connect and get the following response:

Status:      Resolving address of <ftp server>
Status:      Connecting to <ip address>
Status:      Connection established, waiting for welcome message...
<welcome message removed>
Command:      USER <username>
Response:      331 Please specify the password.
Command:      PASS *******
Response:      230 Login successful.
Command:      SYST
Response:      215 UNIX Type: L8
Command:      FEAT
Response:      211-Features:
Error:      Connection timed out
Error:      Could not connect to server

The odd thing is that I can connect to if I am on the 2k8 server, just not from behind it...maybe a DNS issue (??)
Andres PeralesCommented:
have you exempted ftp on the firewall installed on the server?
WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

aesdttAuthor Commented:
I have added exceptions for ports 20 & 21, and have added an exception for the FTP server exe (I am using FileZilla Server).

I even at one point established a custom port range for passive FTP and added exceptions for all of them, but that did not help either.
aesdttAuthor Commented:
so I guess I'm on my own with this one (?)
aesdttAuthor Commented:
there's not anything in the group policies that would affect it is there?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.