FTP connexion failed

Hi Experts,

Need help solving this issue, I publish my FTP site over my sonicwall TZ200 but when I’m trying to connect from an external source, i’m disconnected.  (screen1)

I already try disabling this hidden feature (http://www.asktheadmin.com/2008/07/my-sonicwall-wont-let-me-ftp-error-ftp-pasv-response-bounce-attack-dropped.html), without success, still disconnected. (screen2)

Of course, when i connect internally, everything is fine..  :(
Any help appreciate..

Thanks,
     
screen1.JPG
Screen2.JPG
C2enterpriseAsked:
Who is Participating?
 
C2enterpriseConnect With a Mentor Author Commented:
Hi everyone,

Finally the issue wasn't on the firewall..  I build another VM and put filezilla on it and everything is working fine.  Only thing, i need to leave disable the FTP PASV bounced attack on the diag.html page.

Thanks,
0
 
Aaron TomoskySD-WAN SimplifiedCommented:
What rules do ou have? I set up my FTP or both active and passive. So I do the standard 21 plus a range of 100 up higher.
0
 
carlmdCommented:
Has this ever worked? If not, you probably do not have the rules set up correctly. Did you use the Sonicwall Wizard to create the ftp (public) server? It wil guarantee you have all the required pieces.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
Aaron TomoskySD-WAN SimplifiedCommented:
Also setting up the external address in your FTP software so it resolves both internally and externally is crucial. I use a subdomain FTP.domain.com and my internal dns points to the FTP server ip.
0
 
C2enterpriseAuthor Commented:
Hi experts,  
Yes, I used the wizard to publish the server. internally i'm using filezilla server,  
My internal DNs point to the internal IP 192.168......  
Binding = *
0
 
Aaron TomoskySD-WAN SimplifiedCommented:
What FTP server do you use? IIS? Filezilla?
0
 
C2enterpriseAuthor Commented:
Filezilla  
but internally everything is fine
0
 
Aaron TomoskySD-WAN SimplifiedCommented:
In filezilla there is a setting for the address of itself. This is wha I'm talking about. Ill make a screenshot in a bit if you can't find it
0
 
C2enterpriseAuthor Commented:
are you talking about this this screen?  IP
0
 
Aaron TomoskySD-WAN SimplifiedCommented:
Yes. For passive to work I had to set that to FTP.domain.com, set a static port range, and forward that port range in the sonicwall.

0
 
Aaron TomoskySD-WAN SimplifiedCommented:
If you use filezilla client, you can force active which doesn't need these settings, just a port 21 forward. But if client type people will be using it definitely get passive working.
0
 
digitapCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.