FTP access denied

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

cyberduane - 26 Jun 2006 22:16 GMT

I am running IIS 5.1 on Windows XP Pro SP2.

When trying to access my FTP site, I get the error message indicated by this
screen: http://northoftheneck.com/ServerIssues/FTPerror.htm

I have captured my FTP site settings in the following files:
http://northoftheneck.com/ServerIssues/FTPerror2.htm
http://northoftheneck.com/ServerIssues/FTPerror3.htm
http://northoftheneck.com/ServerIssues/FTPerror4.htm
http://northoftheneck.com/ServerIssues/FTPerror5.htm

Any clues to help me resolve this error will be appreciated.

Thanks,
Duane

Reply to this Message

Robin Walker [MVP] - 26 Jun 2006 22:44 GMT

> I am running IIS 5.1 on Windows XP Pro SP2.
>
[quoted text clipped - 8 lines]
>
> Any clues to help me resolve this error will be appreciated.

Your FTP server appears to be behind a NAT router. IIS issues the wrong
server IP address in PASV mode requests (its internal LAN address instead of
the WAN address of the router). Short of getting a NAT router which can
handle PASV-mode command re-writing on the fly, you will not get PASV-mode
to work with IIS behind a NAT router.

You can try other FTP servers, which support PASV-mode behind NAT routers.

Signature

Robin Walker [MVP Networking]
rdhw@cam.ac.uk

Reply to this Message

cyberduane - 27 Jun 2006 03:12 GMT

Robin,

I was able to open the ftp site using my internal IP address thereby
confirming your response. Thanks. Would it make sense for me to expose the
ftp site through DMZ on my router?

Regards,
Duane

> > I am running IIS 5.1 on Windows XP Pro SP2.
> >
[quoted text clipped - 16 lines]
>
> You can try other FTP servers, which support PASV-mode behind NAT routers.

Reply to this Message

Robin Walker [MVP] - 27 Jun 2006 09:36 GMT

> I was able to open the ftp site using my internal IP address thereby
> confirming your response. Thanks. Would it make sense for me to
> expose the ftp site through DMZ on my router?

That won't help - it is still behind NAT. IIS cannot handle PASV-mode
behind a NAT router. Try a different FTP server - most others will do it.

Signature

Robin Walker [MVP Networking]
rdhw@cam.ac.uk

Reply to this Message