?
Solved

Cisco ASA 5505 firewall - how to open ports for FTP client?

Posted on 2012-03-19
5
Medium Priority
?
1,321 Views
Last Modified: 2012-04-18
For years, I used XP Pro and the command line to send files to an FTP server. Recently, I changed to Windows 7 Pro and also introduced a Cisco ASA 5505 firewall appliance- both on the client side.  Now it fails, and I don't know which change is causing the problem (O/S? or firewall?).

Nothing has changed on the server end.

On the client end, the results are the same with Windows Firewall disabled.

From the Win7 command line, I can connect, but all attempts to send will end with "Connection closed by remote host." This is true using PASV mode, too.

If I use Filezilla GUI on the same PC, I can connect and send files.

On a different PC, a Win7 PC at my house, with no ASA, I can successfully connect AND send. This makes me suspect the ASA, rather than Windows.

However, the fact that Filezilla works (with the ASA in place) tends to suggest that the open ports on the ASA are NOT the problem.

http://www.mdjnet.dk/ftp.html - shows that FTP client needs 2-way data flow.  (refer to case#3 and case#4 if interested)

How can Filezilla succeed while command line FTP fails on the same PC, behind the same firewall? Is the Windows command line FTP using different ports than Filezilla client?

Is it just a matter of opening port 20 and 21 to everything outside and everything inside? What's the syntax for that on the ASA?

Thanks for reading.
0
Comment
Question by:oakie22
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 37740437
0
 

Author Comment

by:oakie22
ID: 37748343
I don't know if I have the right settings in my firewall.

How can FileZilla be working if the required ports are not open?
0
 
LVL 57

Accepted Solution

by:
giltjr earned 2000 total points
ID: 37748492
Filezilla supports both active and passive data transfers.

The MS supplied command line ftp only support active data transfers.

It's possible you have eveything setup to support passive, but not active.

For active you need to allow inbound traffic to any high port, with a source port of 20.
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
This program is used to assist in finding and resolving common problems with wireless connections.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses
Course of the Month10 days, 12 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question