Link to home
Start Free TrialLog in
Avatar of TownTalk
TownTalkFlag for United Kingdom of Great Britain and Northern Ireland

asked on

setting up an FTP site on SBS 2008

I asked a question about this a few weeks ago, but it's not quite right yet.

If I use the Dos FTP command, I can access this ftp site prefectly. But in Windows Explorer, or Internet Explorer I get this error:

An error occured opening that folder on the FTP Server, Make sure you have permission to access that folder. Details
200 Type set to A
227 Entering Passive Mode

I can get around this by configuring Internet Explorer not to use Passive Mode, but I need to have this so that non-technical people can access the site without changing their Internet settings.

I assume that i'm having this problem because I need to open a passive port range in the server's Windows Firewall. To open port 21 I used this command:

netsh advfirewall firewall add rule name="FTP (non-SSL)" action=allow protocol=TCP dir=in localport=21

I read also that to allow passive connections, i should enter this command:

netsh advfirewall set global StatefulFtp enable

Obviously I have done something incorrectly because I still cannot use passive connections. Help please?
ASKER CERTIFIED SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of TownTalk

ASKER

Sorry for not replying sooner. I had a long weekend.

I feel that i've ruled out the edge firewall because this problem also occurs when I try to access the ftp server on the local network, and by using the the internal name of the ftp server. So the edge firewall is not in play.

I believe that the SBS Server has the only firewall which is affecting this.

Ian
I disabled the Windows Firewall on the SBS2008 box and I still have the same problem even when connecting from inside the local network. So i'm really stumped now.
Ok i've fixed it.

In IIS7, when I select the Server Node, it gives me a lot of icons for configuring various features. One of these is 'FTP Firewall Support'. When I open that up, it allows me to configure a Port Range and the External IP Address of the firewall.

The IP address in there was  the external IP address of my router. I decided to change this to the Internal IP address of the SBS box, and that fixed it. It's working now. I can get passive connections internally and externally.

I think maybe I put the address in there when I started trying to fix this. After all it was asking for the External Address of the firewall. I thought it was referring to to router firewall.

I'll award the points to your initial reply so I can close the question.

Thanks for your input

Ian