Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 503
  • Last Modified:

Port Issues and FTP

I just set up FTP on my Windows Server 2003 box with a port number of 4465 for FTP commands.  (It's not 21.)  I can access the FTP home directory using the server itself (127.0.0.1) or any workstation in my LAN.  I'm having trouble, however, accessing the server from the WAN.  I've opened up my DSL router firewall for TCP ports 20 (FTP data) and 4465.  Here's the message I get when I try to access my new FTP server from a remote machine using Filezilla:

Status:      Connected
Status:      Retrieving directory listing...
Command:      PWD
Response:      257 "/" is current directory.
Command:      TYPE I
Response:      200 Type set to I.
Command:      PASV
Response:      227 Entering Passive Mode (192,168,1,2,6,212).
Status:      Server sent passive reply with unroutable address. Using server address instead.
Command:      LIST
Response:      425 Can't open data connection.
Error:      Failed to retrieve directory listing

I'm clearly "getting in the door."  The 192,168,1,2 value is the static IP of my server on the LAN.  Note the subsequent response, however: "Server sent passive reply with unroutable address. Using server address instead."  

My ISP does have a firewall in place for port values under 500.  Am I running into this firewall for port 20?  
Is it something else?
What diagnostics can I try?
0
jdana
Asked:
jdana
  • 2
  • 2
3 Solutions
 
torimarCommented:
Two things you might want to try:

1. Disable Passive Mode in FileZilla;
2. Configure the server to reply with its external address.
0
 
akahanCommented:
On your router, you need to not just open up the firewall, but also forward ports 4465 and 20 to the server's LAN IP address.  Have you done that?
0
 
jdanaAuthor Commented:
torimar
1. I disabled passive mode.
2. Not sure how to configure server to respond with its external address.
akahan
I had configured port forwarding for 20 and 4465 to the server's LAN address.  I wasn't clear on this in the original posting.
0
 
torimarCommented:
1. Does this mean you disabled PASV now and tested, or generally disabled it? Because the logs you posted certainly don't speak of an active connection attempt.

2. Unfortunately, I don't know how to do this for the Windows FTP server. It's easy in FileZilla's server: just select Passive Mode Settings.
0
 
jdanaAuthor Commented:
For "Active IP Mode" I made the changes shown in the screen shot.  These are changes made to the client.  The error message, however,  sure makes it look like the issue resides with the server.  I found a K-Base article that explains how to make the change.
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now