FTP Problem? Nearly works, but is driving me crazy.

I have a server running Microsoft Windows Server 2003 R2 - Standward x64
Edition.

Roles installed are: DHCP Server, Application Server (IIS) and File Server.

It's connected to the internet, and 'Internet Connection Sharing' is enabled.

Windows Firewall is also enabled on that connection. (No exceptions.)

TCP/IP Filtering is set to "Permit All" (for TCP Ports/UDP Ports/IP
Protocols.)

'Internet Connection Sharing' is working very well and any of my private
network PC's can surf the web and share files with the server and eachother
(simply using a Windows Workgroup.)

This is a very basic setup, there no users (other than administrator)
listed, and attached computers are simply in the Workgroup.

The problem is that if any of my computers on the private workgroup try to
access an FTP site through the server, they are getting blocked.

Error: "The Connection with the server was reset".

Error number is: 12031

If I try to access an FTP site directly from the server itself (like
ftp.microsoft.com) it works perfectly.

So to recap, I've not been able to find out how to get FTP access through
the server using internet connection sharing. (I really don't want to create
any security issues, other than just open up the ability for my internal
network to get FTP access through this server.)

If you could guide me through the steps, that would be great.

David

=?Utf-8?B?RGF2aWQ=?= <(E-Mail Removed)> wrote in
news:E453EC66-493B-4AA3-A00C-(E-Mail Removed):

> I have a server running Microsoft Windows Server 2003 R2 - Standward
> x64 Edition.
>
> Roles installed are: DHCP Server, Application Server (IIS) and File
> Server.
>
> It's connected to the internet, and 'Internet Connection Sharing' is
> enabled.
>
> Windows Firewall is also enabled on that connection. (No exceptions.)
>
> TCP/IP Filtering is set to "Permit All" (for TCP Ports/UDP Ports/IP
> Protocols.)
>
> 'Internet Connection Sharing' is working very well and any of my
> private network PC's can surf the web and share files with the server
> and eachother (simply using a Windows Workgroup.)
>
> This is a very basic setup, there no users (other than administrator)
> listed, and attached computers are simply in the Workgroup.
>
> The problem is that if any of my computers on the private workgroup
> try to access an FTP site through the server, they are getting
> blocked.
>
> Error: "The Connection with the server was reset".
>
> Error number is: 12031
>
> If I try to access an FTP site directly from the server itself (like
> ftp.microsoft.com) it works perfectly.
>
> So to recap, I've not been able to find out how to get FTP access
> through the server using internet connection sharing. (I really don't
> want to create any security issues, other than just open up the
> ability for my internal network to get FTP access through this
> server.)
>
> If you could guide me through the steps, that would be great.
>
> David
>


What FTP client program are you using? If you are using Internet
Explorer, make sure you set "Passive" FTP mode on in the advanced
settings. If you are using another client, it may call this PASV mode.
I may be mistaken, but I never found this setting in the commandline FTP
client program that comes with Windows XP, so I could not get it to work
through a firewall.

"z1z1z1" wrote:

> =?Utf-8?B?RGF2aWQ=?= <(E-Mail Removed)> wrote in
> news:E453EC66-493B-4AA3-A00C-(E-Mail Removed):
>
> > I have a server running Microsoft Windows Server 2003 R2 - Standward
> > x64 Edition.
> >
> > Roles installed are: DHCP Server, Application Server (IIS) and File
> > Server.
> >
> > It's connected to the internet, and 'Internet Connection Sharing' is
> > enabled.
> >
> > Windows Firewall is also enabled on that connection. (No exceptions.)
> >
> > TCP/IP Filtering is set to "Permit All" (for TCP Ports/UDP Ports/IP
> > Protocols.)
> >
> > 'Internet Connection Sharing' is working very well and any of my
> > private network PC's can surf the web and share files with the server
> > and eachother (simply using a Windows Workgroup.)
> >
> > This is a very basic setup, there no users (other than administrator)
> > listed, and attached computers are simply in the Workgroup.
> >
> > The problem is that if any of my computers on the private workgroup
> > try to access an FTP site through the server, they are getting
> > blocked.
> >
> > Error: "The Connection with the server was reset".
> >
> > Error number is: 12031
> >
> > If I try to access an FTP site directly from the server itself (like
> > ftp.microsoft.com) it works perfectly.
> >
> > So to recap, I've not been able to find out how to get FTP access
> > through the server using internet connection sharing. (I really don't
> > want to create any security issues, other than just open up the
> > ability for my internal network to get FTP access through this
> > server.)
> >
> > If you could guide me through the steps, that would be great.
> >
> > David
> >
>
>
> What FTP client program are you using? If you are using Internet
> Explorer, make sure you set "Passive" FTP mode on in the advanced
> settings. If you are using another client, it may call this PASV mode.
> I may be mistaken, but I never found this setting in the commandline FTP
> client program that comes with Windows XP, so I could not get it to work
> through a firewall.
>

I've tried, CuteFTP, Dreamweaver & Windows Explorer. I've also tried the
Passive FTP setting on and off. Still not working. (It's also not just one
PC with this problem, it's all of them.) It seems to be some kind of
restriction that workgroup users (guests) need permission to use the FTP as
it's working OK on the server itself. However I can't find the settings or
any reference in the various Microsoft support systems to simply flick on and
"FTP is allowed" switch.

I've bitten the bullet and paid the $99 to get an answer from Microsoft. No
reply yet. It will be amusing if it's solved here first.

David

Maybe the solution i have found in other post may help you. It does help me.

"I did the same thing: netsh routing ip nat add ftp
after that I restart RRAS

and nothing



but.... when I do: netsh routing ip nat delete ftp

it works.... it is very strange for me, but you shoulf try too.


--
mnicolas"


"David" wrote:

>
>
> "z1z1z1" wrote:
>
> > =?Utf-8?B?RGF2aWQ=?= <(E-Mail Removed)> wrote in
> > news:E453EC66-493B-4AA3-A00C-(E-Mail Removed):
> >
> > > I have a server running Microsoft Windows Server 2003 R2 - Standward
> > > x64 Edition.
> > >
> > > Roles installed are: DHCP Server, Application Server (IIS) and File
> > > Server.
> > >
> > > It's connected to the internet, and 'Internet Connection Sharing' is
> > > enabled.
> > >
> > > Windows Firewall is also enabled on that connection. (No exceptions.)
> > >
> > > TCP/IP Filtering is set to "Permit All" (for TCP Ports/UDP Ports/IP
> > > Protocols.)
> > >
> > > 'Internet Connection Sharing' is working very well and any of my
> > > private network PC's can surf the web and share files with the server
> > > and eachother (simply using a Windows Workgroup.)
> > >
> > > This is a very basic setup, there no users (other than administrator)
> > > listed, and attached computers are simply in the Workgroup.
> > >
> > > The problem is that if any of my computers on the private workgroup
> > > try to access an FTP site through the server, they are getting
> > > blocked.
> > >
> > > Error: "The Connection with the server was reset".
> > >
> > > Error number is: 12031
> > >
> > > If I try to access an FTP site directly from the server itself (like
> > > ftp.microsoft.com) it works perfectly.
> > >
> > > So to recap, I've not been able to find out how to get FTP access
> > > through the server using internet connection sharing. (I really don't
> > > want to create any security issues, other than just open up the
> > > ability for my internal network to get FTP access through this
> > > server.)
> > >
> > > If you could guide me through the steps, that would be great.
> > >
> > > David
> > >
> >
> >
> > What FTP client program are you using? If you are using Internet
> > Explorer, make sure you set "Passive" FTP mode on in the advanced
> > settings. If you are using another client, it may call this PASV mode.
> > I may be mistaken, but I never found this setting in the commandline FTP
> > client program that comes with Windows XP, so I could not get it to work
> > through a firewall.
> >
>
> I've tried, CuteFTP, Dreamweaver & Windows Explorer. I've also tried the
> Passive FTP setting on and off. Still not working. (It's also not just one
> PC with this problem, it's all of them.) It seems to be some kind of
> restriction that workgroup users (guests) need permission to use the FTP as
> it's working OK on the server itself. However I can't find the settings or
> any reference in the various Microsoft support systems to simply flick on and
> "FTP is allowed" switch.
>
> I've bitten the bullet and paid the $99 to get an answer from Microsoft. No
> reply yet. It will be amusing if it's solved here first.
>
> David