Welcome to ISAserver.org

Non-21 port secondary ftp server again

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Server Publishing >> Non-21 port secondary ftp server again

Page: [1]

Message

<< Older Topic Newer Topic >>

Non-21 port secondary ftp server again - 26.Dec.2003 1:26:00 AM

Zheka009

Posts: 9
Joined: 25.Dec.2003
Status: offline

Hi all!
I have ftp server running on a machine in internal network wich is published on ISA Server via Server Publishing Rule. And now I need to publish one more server running on another machine on port 2121 (Titan FTP Server). My actions were:
1. Protocol definition - MyFTP, Inbound, TCP, 2121
2. Server publishing rule for that definition
3. wspcfg.ini in System32 dir where the service itself is placed
[srxtitan]
ServerBindTcpPorts=2121,20
LocalBindTcpPorts=20
Persistent=1
KillOldSession=1
ForceCredentials=0
4. Default gateway to ISA's internal interface
5. All OutBound IP traffic on ISA is allowed

... And finaly it doesn't work. Client can connect server, log on but can't get the data
"Can not open data connection"
I think it tries to open secondary ports for data transfer. I tried to switch FTP filter off on ISA but result stays the same.
And I have FireWall client installed on FTP machine

Post #: 1

Featured Links*

RE: Non-21 port secondary ftp server again - 26.Dec.2003 4:12:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Z,

Is it working with the IIS FTP service?

Thanks!
Tom

(in reply to Zheka009)

Post #: 2

RE: Non-21 port secondary ftp server again - 28.Dec.2003 11:40:00 PM

Zheka009

Posts: 9
Joined: 25.Dec.2003
Status: offline

I didn't check it on IIS FTP Server. Our primary FTP server (21 port) is WarFTP Daemon and the secondary is Titan FTP Server.

You think I should try on IIS FTP?

(in reply to Zheka009)

Post #: 3

RE: Non-21 port secondary ftp server again - 4.Jan.2004 8:39:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Z,

Before you try it with IIS FTP, make sure the FTP server has access to a Site and Content Rule and Protocol Rule that allows it access to all sites and all protocols.

HTH,
Tom

(in reply to Zheka009)

Post #: 4

RE: Non-21 port secondary ftp server again - 22.Jan.2004 3:49:00 AM

Zheka009

Posts: 9
Joined: 25.Dec.2003
Status: offline

I think problem is in secondary ports used for data transfer in the Passive mode. How can I allow packet transmission to my inner FTP server on port range 10000-10500 for example?

(in reply to Zheka009)

Post #: 5

RE: Non-21 port secondary ftp server again - 12.Feb.2004 3:20:00 PM

nickc_11

Posts: 4
Joined: 12.Dec.2003
Status: offline

Was there ever a solution to this problem? I am fighting something that looks very similar. My problem also arises once the client is logged into the FTP server. I agree, it seems that it will not take the PASV port range. I made an "all open" rule in ISA, and specified that user. I thought this would have opened the door. Any clues??

(in reply to Zheka009)

Post #: 6

RE: Non-21 port secondary ftp server again - 13.Feb.2004 8:11:00 AM