FTP Thru the MN-700 and XP-SP2 Firewall

Hi! Need some help configuring an MN-700 wireless router to accept a
passive FTP connection. I have the router set to allow persistent port
forwarding from external port 21 to internal port 21, and external ports
2000 to 2010 to internal ports 2000 to 2010 on the gateway machine
(192.168.0.XXX). I also have ports 21, and 2000-2010 open on the XP
Firewall.

Active connections come through fine, but passive ones hang. I'm pretty
sure I have the FTP server configured properly, as I can make a passive
connection locally. Can anyone tell me what I'm missing on either the
router or the firewall?

Thanks!

You need to tell the FTP server software that your WAN ip should be the ip
used for passive mode (otherwise, the FTP server will assume that the LAN ip
assigned to that computer is to be used, and people connecting from outside
your network - ie the internet, will not be able to access that LAN ip since
it is non-routable).

--
Jason Tsang - Microsoft MVP

Find out about the MS MVP Program -
http://mvp.support.microsoft.com/default.aspx

"DeNunzio" <(E-Mail Removed)> wrote in message
news:V2Y7e.3729$(E-Mail Removed)...
> Hi! Need some help configuring an MN-700 wireless router to accept a
> passive FTP connection. I have the router set to allow persistent port
> forwarding from external port 21 to internal port 21, and external ports
> 2000 to 2010 to internal ports 2000 to 2010 on the gateway machine
> (192.168.0.XXX). I also have ports 21, and 2000-2010 open on the XP
> Firewall.
>
> Active connections come through fine, but passive ones hang. I'm pretty
> sure I have the FTP server configured properly, as I can make a passive
> connection locally. Can anyone tell me what I'm missing on either the
> router or the firewall?
>
> Thanks!
>

Thank, Jason. Had already done that. The software manufacturer said "leave
it blank" (as I have a dynamic IP), but that didn't make sense to me (nor
did it work). I also tried temporarily plugging in my assigned WAN IP, and
also tried putting in the domain name associated with the dynamic IP.
Neither of those worked either.

When I attempt to log on from a remote PC, the FTP client used returns
"error connecting to socket" in PASV mode, but connect fine in active. On
the server log, I can see that it has switched to passive mode, but hangs
there.

"Jason Tsang" <jason-(E-Mail Removed)> wrote in message
news:eZwYT%(E-Mail Removed)...
> You need to tell the FTP server software that your WAN ip should be the ip
> used for passive mode (otherwise, the FTP server will assume that the LAN
> ip assigned to that computer is to be used, and people connecting from
> outside your network - ie the internet, will not be able to access that
> LAN ip since it is non-routable).
>
> --
> Jason Tsang - Microsoft MVP
>
> Find out about the MS MVP Program -
> http://mvp.support.microsoft.com/default.aspx
>
> "DeNunzio" <(E-Mail Removed)> wrote in message
> news:V2Y7e.3729$(E-Mail Removed)...
>> Hi! Need some help configuring an MN-700 wireless router to accept a
>> passive FTP connection. I have the router set to allow persistent port
>> forwarding from external port 21 to internal port 21, and external ports
>> 2000 to 2010 to internal ports 2000 to 2010 on the gateway machine
>> (192.168.0.XXX). I also have ports 21, and 2000-2010 open on the XP
>> Firewall.
>>
>> Active connections come through fine, but passive ones hang. I'm pretty
>> sure I have the FTP server configured properly, as I can make a passive
>> connection locally. Can anyone tell me what I'm missing on either the
>> router or the firewall?
>>
>> Thanks!
>>
>
>