Windows Forum

Ask something
Discussion Locked

FTP Won't Work

0 helpful
7 replies

by kingofthenerds

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,
I have a windows 2000 server running ISA
Server and i am trying to ftp anything outside of
my network.

I have tried multiple FTP sites but have had no
luck. As far as i know i have opened port 21 to
allow access to outbound FTP access.

Still i have had no luck trying to FTP any site.

Please help, i have an ADSL connection
directly into my W2k ISA Server.

Please give me some advice,

Thanks
Eli

7 replies

by maz1980

Port 21 is only for control channel. FTP connection use another random port on client and server for data channel. Try to switch your FTP client to Passive Mode. Or if your client already in passive mode, try to disable it. On IE, the setting is on Tools>Internet Options>Advance>Use Passive FTP...

by cg it

how do you have ISA server configured? open up your ISA management console. expand servers and arrays, expand access policies. click on site and content rules and tell what rule is there. click on packet filters and tell us what you have for ftp port 20 and port 21. how are the filters configured? default IP address on the external interface? or did you specify the ip address?

by cg it

ok well. first off you have to share the folder what will be used for FTP. if you want you can share the FTP root folder under Inetpub and setp permissions. For test purposes have the everyone group get full control. In IIS you have to set that shared folder as the home directory. For test purposes you can set the default FTP site home directory to the shared folder. Also set the security accounts to allow anonymous connections and leave the IUSR_ account and password/allow IIS to control password enabled. Next in ISA, you have to create a rule and packet filters to allow inbound/outbound ftp traffic over port 21 and port 20. Open up ISA management console, in the tool bar click view and choose taskpad. Next, expand servers and arrays, expand , expand access policy, click on IP packet filters. you need to create custom packet filters to allow ftp traffic through ISA server. Click on the Create a Packet Filter Icon in the right pane and follow the wizards instructions to create a custom filter for FTP traffic inbound and outbound through port 21. If you have a firewall/router in front of ISA server you'll need to enable port fowarding to the external interface on ISA server.

by kingofthenerds

You say that port 21 is a control port and another is
used as a data port, how would i set this up using ISA
server. Do i have to open an outbound port?? how
would i know what number port to open??

For instance at the moment i am trying to ftp the
address ftp://users.bigpond.com.au/

This is a test ftp address but i get the following message
The FTP folder "as above" is read only because the
proxy server is not set up to allow full acess.

To move, paste, rename or delete files you must use a
different proxy. (with a close button)

when i click close it simply sends me to a "this website
can't be found' page
The message on the page is ' the web site you are
looking for is unavailable due to its identification
configuration settings.

11004 - Host not found
Internet security and Acceleration Server

by kingofthenerds

I have an ISA server and have followed steps
from an ISA site on how to setup port 21 to
allow outbond access. But that is all.

I only want to access any ftp account out of my
network. Using a pc in my network, type in
ftp://users.bigpond.com.au in my IE browser
and for it to display a folder.

At the moment it doesn't, i don't want to setup
an FTP server on my end, just access one on
another end. Forget the fact of adding rights to
the FTP server because the FTP address
above can be accessed by everyone, except
me.

Please help, as i said, all i have open is port
21. This is my network layout:
internet>adsl router>ISA
server>switch>network
I have check the adsl router and nothing is
being blocked.

Help me please

This discussion is closed to new replies.