Computing.Net > Forums > Networking > FTP behind router problem

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

FTP behind router problem

Reply to Message Icon

Name: Charliesz
Date: May 27, 2003 at 17:42:58 Pacific
OS: WinXP
CPU/Ram: 900Mhz/768MB
Comment:

Gday.

Here is the situation:

i have 3 PCs all connected through a router(manufact: Network Everywhere). Trying to get one of the machines to run an FTP server(G6 server). I've "forward"ed the FTP port in router settings and its all good. The thing is, people are ABLE to connect to my FTP but NOT to retrieve the Data Listing. So they just time out. Both the Passive and non-Passive modes in the client settings give the same result - time out("Unable to retrieve Data Lising...".

Also, ive notcied that people who connect to my ftp , who themselves are behind a router , get this problem. Others, who are not behind a router can login just fine (well, only one person was able to do that ...will test more).

I come across this problem not for the first time and notice other people get that too, so its not a specific case i'd take.
Any help would be appreciated.



Sponsored Link
Ads by Google

Response Number 1
Name: dandlion
Date: May 27, 2003 at 18:37:31 Pacific
Reply:

Try forwarding port 20 also, check out this link:
http://slacksite.com/other/ftp.html


0

Response Number 2
Name: Charliesz
Date: May 27, 2003 at 23:55:15 Pacific
Reply:

Thanks for the speedy response.

GOod link, i've been there before. Its helps alot actualy. I run my FTP server at port 2000. So in the "Forwarding" setting i allow port 2000 amd port 2001.
People still are unable to "Data List"


0

Response Number 3
Name: jonob
Date: May 28, 2003 at 00:30:27 Pacific
Reply:

What OS's are you using?
Is linux in there somewhere?


0

Response Number 4
Name: Charliesz
Date: May 28, 2003 at 00:42:45 Pacific
Reply:

I am running WinXP Professional.

Ive conducted abit more tests(people connecting to me).

People behind routers get that problem. People that are not behind the router can access the FT with no problems. So , i suspect its has somethign to do with ports being blocked ont he Client's machine (by the router) and not by the server. But then it would be unreasonable because each time i wanted someone to conenct to my FTP , they'd have to open holes in their router's firewall. there must be an easier fix.

Data List port is the issue.


0

Response Number 5
Name: dandlion
Date: May 28, 2003 at 04:47:05 Pacific
Reply:

I've seen problem before server side, with serv-u and ws_ftp. And it doesnt matter what client they use, even ftp from dos has the same effect.

Id try a few things, even if you're not going to keep it as part of your permanent configuration.
Temporarily:
1) Try using ports 20/21
2) Drop one or two files in a temp directory (users home directory) with read/write permissions
3) Make sure users have 'List rights' and have them switch between active and passive modes.

If they can't switch between active/passive in their client, there's a good client here: http://www.ftpcommander.com It's free, you just have to sign up.


0

Related Posts

See More



Response Number 6
Name: Charliesz
Date: May 28, 2003 at 19:04:10 Pacific
Reply:

Thanks for your time.
Im gonna try it out and let you know on the progress.


0

Response Number 7
Name: Charliesz
Date: May 29, 2003 at 00:55:13 Pacific
Reply:

Ok, ive tried what you told me.
Here are the results:

I tried running my FTP on port 21. I've "forward"ed port 21 in router settings.
FTP on port 21 is a "preset" on the router so all i had to do was to enable it. it is preset in the following way:
Ext port: 21 , using TCP , Int port: 20


Tried connecting though a buddy of mine and it connected all the way successfuly and was able to see folders and even browse!:)

I've ran "netstat -a -n"(on server side) just to see what ports are active and indeed both ports 21 and 20 were "ESTABLISHED" status.

Now, i've tried doing exactly the same but on a different port , 2200.
So, i've forwarded it in the routers settings in the following way:
Ext port: 2200 , using TCP, Int port: 2199


Tried connecting. It friggin' hangs when trying to retrieve Data Listing (150 Opening data connection for directory list.
) and times out with the following error (426 Cannot retrieve. Failed. Aborting)

I went to "Netstat -n -a"(server side) to check what ports are open again. And heres what i got:
port 2200 - ESTABLISHED
port 2199 - SYN_SENT


I dont know what to try anymore. Of course, i could use port 21 since its working but now that i got so much time spent on figuring this out , cannot back off.


ANY help would be appreciated. Pehaps i should repost.


0

Response Number 8
Name: dandlion
Date: May 29, 2003 at 08:50:04 Pacific
Reply:

Is Network Everywhere a Linksys, or use linksys firmware?

I found this in a google search, of (something like) syn_sent+linksys, what little info I could find seems to implicate your router.

"... If I run netstat -otp after trying to connect from behind the linksys is looks like it is getting stuck in the SYN_SENT stage waiting for a reply from the client on the auth port. Once established the is no problem. Where do I start?
>> The system you're trying to connect to is attempting a connection to IDENT the connecting client. For whatever reason, it's getting no response, and timing out. If you're firewalling somewhere, you need to REJECT the connections (i.e. send an ICMP message saying connection is administratively prohibited, or a TCP reset) instead of having the packets disappear into a black hole."
Also found this:
"Save yourself time and stress... turn off Explicit Congestion Notification (ECN) in your operating system's TCP/IP stack before attempting to connect to this device's web interface. In Linux type echo 0 > /proc/sys/net/ipv4/tcp_ecn to turn off this feature. Other Linksys devices will probably require this mod as well."

I don't know what good this info is since you can't manually configure your router like you can through *nix. But it may point you in the right direction.

Try upgrading your router to the latest firmware, and temporarily try opening passthroughs, multicast, ipsec and ptpp.
That's just a last ditch suggestion, don't really have a clue whether it'll do the trick or not. All things considered, I still can't see why your FTP works on ports 20/21 and not on others.

Good luck



0

Response Number 9
Name: Charliesz
Date: May 30, 2003 at 00:04:14 Pacific
Reply:

Thanks again for all your efforts:)


0

Sponsored Link
Ads by Google
Reply to Message Icon

VPN server behind firewal... Local Area Network Proble...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Networking Forum Home


Sponsored links

Ads by Google


Results for: FTP behind router problem

ftp behind router www.computing.net/answers/networking/ftp-behind-router/8255.html

ftp router problem www.computing.net/answers/networking/ftp-router-problem/17677.html

SOCKS 5 Proxy Server behind Router www.computing.net/answers/networking/socks-5-proxy-server-behind-router/11781.html