Windows Firewall blocking FTP Website

Hi all,

I have windows 2003 server SP1. I setup a ftp website on my server and was
able to successfully access it from outside. But when I enable windows
firewall, I was then unable to connect to my ftp server. I have added
exception in windows firewall for tcp ports 20 and 21 but even then I am
unable to connect to my ftp site from outside. Please tell me what am I
missing.

Thanks,

Arsalan

What' the error message?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Arsalan Ahmad" <arsal__@hotmail.com> wrote in message news:%23ArHWX$(E-Mail Removed)...
Hi all,

I have windows 2003 server SP1. I setup a ftp website on my server and was
able to successfully access it from outside. But when I enable windows
firewall, I was then unable to connect to my ftp server. I have added
exception in windows firewall for tcp ports 20 and 21 but even then I am
unable to connect to my ftp site from outside. Please tell me what am I
missing.

Thanks,

Arsalan

did you set the scope of the exception to include computers on the
internet?? i forget the default, it may be to just allow access from your
lan address range.

"Arsalan Ahmad" <arsal__@hotmail.com> wrote in message
news:%23ArHWX$(E-Mail Removed)...
> Hi all,
>
> I have windows 2003 server SP1. I setup a ftp website on my server and was
> able to successfully access it from outside. But when I enable windows
> firewall, I was then unable to connect to my ftp server. I have added
> exception in windows firewall for tcp ports 20 and 21 but even then I am
> unable to connect to my ftp site from outside. Please tell me what am I
> missing.
>
> Thanks,
>
> Arsalan
>

Yes access is set to allow computers from internet as well.

"Dave" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> did you set the scope of the exception to include computers on the
> internet?? i forget the default, it may be to just allow access from your
> lan address range.
>
> "Arsalan Ahmad" <arsal__@hotmail.com> wrote in message
> news:%23ArHWX$(E-Mail Removed)...
>> Hi all,
>>
>> I have windows 2003 server SP1. I setup a ftp website on my server and
>> was able to successfully access it from outside. But when I enable
>> windows firewall, I was then unable to connect to my ftp server. I have
>> added exception in windows firewall for tcp ports 20 and 21 but even then
>> I am unable to connect to my ftp site from outside. Please tell me what
>> am I missing.
>>
>> Thanks,
>>
>> Arsalan
>>
>
>

http://slacksite.com/other/ftp.html

Take a look here. I believe your problem relates to ports above 1023.
In passive mode these ports must also be open. I am betting that these
ports are being blocked. If you are able to authenticate, but not
actually tranfer files, that would indicate a passive connection
dropping packets on ports above 1023.

Micah A. Norman

Even after opening ports 1023 and 1024, I am unable to connect with FTP.
When I try to open ftp://mysite.com then it does ask me the user id and
password but does not display content of the ftp site. How can I solve this
problem or how can I create an active ftp site?

Arsalan

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> http://slacksite.com/other/ftp.html
>
> Take a look here. I believe your problem relates to ports above 1023.
> In passive mode these ports must also be open. I am betting that these
> ports are being blocked. If you are able to authenticate, but not
> actually tranfer files, that would indicate a passive connection
> dropping packets on ports above 1023.
>
> Micah A. Norman
>

Try to open ports 1023 to 2048. Does your security log or the firewall
log show anything?

Micah A. Norman