FTP help

[Qbical]

ok, well i tried to setup the whole FTP bit through IIS AND Serv-U and i cant get either to work. i followed both sets of directions but no dice.
i know it is a little broad but any suggestions for either?

ok i lied, i went into the admin tools>event viewer and it shows that
SERVER IS NOT LISTENING ON IP 192.168.0.** ; port number 21 is already in use.
the computer that im using for FTP is on a switch that is connected to the router so i am getting an "inside" address i know that. so i changed the PASV port range option but that still didnt work. i also set in the router my FTP port ranges but still no dice.

[deathcloud33]

ok, well i tried to setup the whole FTP bit through IIS AND Serv-U and i cant get either to work. i followed both sets of directions but no dice.
i know it is a little broad but any suggestions for either?

ok i lied, i went into the admin tools>event viewer and it shows that
SERVER IS NOT LISTENING ON IP 192.168.0.** ; port number 21 is already in use.
the computer that im using for FTP is on a switch that is connected to the router so i am getting an "inside" address i know that. so i changed the PASV port range option but that still didnt work. i also set in the router my FTP port ranges but still no dice.
I'm betting you have a program like skype or something open, which is already configured to use that port.

[Snowcone]

You can change all your ports etc in Serv-U as well, as I used to use it to run a huge FTP.

Try to run it manually and set your host IP to your internal IP; not the one you get from the router. You could try to set it up as your gateway to reroute it too.

But routers can be a total ***** in terms of setting up an FTP.

[deathcloud33]

You can change all your ports etc in Serv-U as well, as I used to use it to run a huge FTP.

Try to run it manually and set your host IP to your internal IP; not the one you get from the router. You could try to set it up as your gateway to reroute it too.

But routers can be a total ***** in terms of setting up an FTP.
How do you determine your internal IP?

[Qbical]

i dont have skype or whatever that is, there is the ABIT components and sound, and anit virus apps running and thats about it. maybe AIM?

[NotMyBest2Day]

If you've got Serv-U, you can uninstall the IIS stuff completely. I just set my server back up yesterday and had a guinnea pig friend keep trying to connect after I changed some settings. I ended up having to set up Passive mode, and that one is the one that took me a few minutes to get.

For security reasons, I changed my FTP port to 27150 (that way port scan won't pick it up as easily, since all the port scans I've seen stop at about 6000 or so) and opened up a small range of ports to use for passive mode.

So in the router's port-forwarding page, outside 27150 TCP to inside 27150 on 192.168.214.100 (mine's not the 0 in the third octet because I changed it), and I already have 6200-6400 TCP and UDP opened up for P2P programs, so I just used the upper 50 ports on that range for passive.

I have an older version of Serv-U, so I don't know if the newer versions have the same basic layout with the tree on the left, but under << Local Server >>, go to Settings and the advanced tab and enter in for PASV port range up to 50 ports to use.

Then down on the domain you made, click on the actual name for the domain so that you can get the name, IP address, and port number and punch in whatever port number you decide to use. The reason I went with a 5-digit port number was from the port scans, and I was getting 50-80 attempted logins per day, and since changing it to that high number, I haven't had a single hit in two years.

Then, settings under the domain, go to the advanced tab, again, and set up 'allow passive mode data transfers, use IP [text box]' In the text box is your external IP address (the address for the modem). In one of the router pages, there should be WAN status or something similar, and it should tell you the external address (not going to be a 192.168.x.x address). If you don't have any luck with that, going to this page: http://www.testmy.net/tools/toolbox.php will show you what IP address you appear as on the Internet, and that's the one you put in the text box.

That's all it took for me to get it set up, and it's working fine now. Hope I helped the situation a bit.

[Qbical]

yea i was able to uninstall the IIS stuff and that cleared up my port 21 option so i was able to get it online. now the problem is that i cannot connect to it from any of my comps. i am like 99% sure it is because the IP (192.168.0.11) which is inside of course. i am on the phone holding to get our actual IP address. so do i need to go into my router and make some more changes to the FTP options or....? ps thanks for the help so far.

[NotMyBest2Day]

I had that link to use and it'll show you what your external IP address is. You should be able to connect with no problems internally (on the LAN) first, and then try to get it through the router (firewall).

All it should require for internal is just tell it what port to listen on, and then on your remote client (another computer) try to connect to the internal address with the port it's listening on and that should do it.

[deathcloud33]

I had that link to use and it'll show you what your external IP address is. You should be able to connect with no problems internally (on the LAN) first, and then try to get it through the router (firewall).

All it should require for internal is just tell it what port to listen on, and then on your remote client (another computer) try to connect to the internal address with the port it's listening on and that should do it.
Argh, my server is still failing to get past my routers firewall.
So I go to the ip site thing, then use that number to access my server remotely (outside the network), and it will translate it into my network IP later?

[NotMyBest2Day]

It's supposed to, as long as you have the ports set up correctly with the router.

[yahooadam]

id say you havent set up port forwarding properly, from what ive read ....

[deathcloud33]

id say you havent set up port forwarding properly, from what ive read ....
Mmmkay...
I'll post a screenshot of my port forwarding page.

http://img87.imageshack.us/img87/6479/portforward9xs.png

The first is for the FTP of course, and the second for Remote Desktop Control (incase I need to fix it from my dads house or something)

I took out the IP of the router, because I have no idea whether or not it can be used for 'wrong-doing.' I also doubt it matters.

EDIT:maybe the protocol is wrong?

[yahooadam]

no TCP is correct (checked on my router)

are you sure you got your machines IP right (remember its your internal IP)

http://img140.imageshack.us/img140/1889/network4vo.jpg

[deathcloud33]

no TCP is correct (checked on my router)

are you sure you got your machines IP right (remember its your internal IP)

http://img140.imageshack.us/img140/1889/network4vo.jpg
Yes, I'm VERY sure it's right.
http://img511.imageshack.us/img511/7447/ip8jy.png

[yahooadam]

well last couple of suggestions

you might need to restart your router for the changes to take effect

otherwise

portforward.com (or somthing like that, google portforward) has a guide for port forwarding on linksys routers

[NotMyBest2Day]

My port forwarding works just fine, really.

Here's my configuration, and it works great.

First there's the domain settings:
domainsettings.gif [800x489; 13,459 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/domainsettings.gif)

Then telling it what public (external) address to use for passive (PASV):
pasvwanip.gif [800x489; 14,418 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/pasvwanip.gif)

Then specifying the pasv ports to use (max of 50):
pasvportrange.gif [800x489; 17,558 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/pasvportrange.gif)

Now we go to the router.
On my Linksys, there is one section called forwarding, which has the ranges you can choose on your own, and there's a button to click for UPnP port forwarding, I have both shown since I use both.

Port ranges:
portrange.gif [709x243; 10,896 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/portrange.gif)
UPnP ports:
upnpports.gif [708x595; 21,477 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/upnpports.gif)

With this setup, it works great for me with no problems at all. Passive mode is needed when going through a firewall, whether it is software (Zone Alarm, Norton Internet Firewall, etc) on a computer with the modem directly connected, or a hardware firewall (router) that acts as the directly connected computer.

I use the 6200-6400 range for other things, too, such as P2P programs, and AIM/Yahoo messenger. Just go in and tell it to use a port in that range for file transfers, and it's done.

[deathcloud33]

My port forwarding works just fine, really.

Here's my configuration, and it works great.

First there's the domain settings:
domainsettings.gif [800x489; 13,459 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/domainsettings.gif)

Then telling it what public (external) address to use for passive (PASV):
pasvwanip.gif [800x489; 14,418 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/pasvwanip.gif)

Then specifying the pasv ports to use (max of 50):
pasvportrange.gif [800x489; 17,558 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/pasvportrange.gif)

Now we go to the router.
On my Linksys, there is one section called forwarding, which has the ranges you can choose on your own, and there's a button to click for UPnP port forwarding, I have both shown since I use both.

Port ranges:
portrange.gif [709x243; 10,896 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/portrange.gif)
UPnP ports:
upnpports.gif [708x595; 21,477 bytes] (http://www.lifelessempathy.net/pics/pcstats/ftp/upnpports.gif)

With this setup, it works great for me with no problems at all. Passive mode is needed when going through a firewall, whether it is software (Zone Alarm, Norton Internet Firewall, etc) on a computer with the modem directly connected, or a hardware firewall (router) that acts as the directly connected computer.

I use the 6200-6400 range for other things, too, such as P2P programs, and AIM/Yahoo messenger. Just go in and tell it to use a port in that range for file transfers, and it's done.

the 6275-6324 doesn't work because Serv-U will only let me have a total of FIVE ports. =(

[NotMyBest2Day]

Well then just do five. Some is better than none.

[deathcloud33]

Well then just do five. Some is better than none.
Okay, which five?
Also, my router has firmware 2.02.2, and can't upgrade, so the layout is different.
Where is the UPnP?

EDIT: Port forward Screenshot:
http://img73.imageshack.us/img73/1349/upnp7sy.png

[NotMyBest2Day]

Just pick five to use, it shouldn't really matter. Since you have the 6200-6400 range open, I'd also make the FTP port (supposed to be 21) somewhere in the range, also, like 6221 or something. That way everything is in one range.

[deathcloud33]

Just pick five to use, it shouldn't really matter. Since you have the 6200-6400 range open, I'd also make the FTP port (supposed to be 21) somewhere in the range, also, like 6221 or something. That way everything is in one range.
6221=21??
.....

[NotMyBest2Day]

Yeah. That's how I do it. 10080 = 80, 10021 = 21, etc. There's nothing wrong with just going with 21 for it, but you'll get port scanned and have at least 15 attempted connections per day, so that's why I go with a high-range port.

[deathcloud33]

Yeah. That's how I do it. 10080 = 80, 10021 = 21, etc. There's nothing wrong with just going with 21 for it, but you'll get port scanned and have at least 15 attempted connections per day, so that's why I go with a high-range port.
I have everything set up perfectly as far as I can tell, and it's still not working.
Any suggestions on what I should check?

[NotMyBest2Day]

Well if you're doing just plain old 21, it's very possible your ISP may block that port, so that's the other advantage to going with a high-range port. That's the only thing I can think of at this piont. Things like Windows Firewall, Norton, McAfee, etc will probably keep it from working, too. I don't use any software firewalls since the router being a hardware firewall is enough.

Technically, FTP and HTTP servers are supposed to be in the DMZ where the router's firewall doesn't really have much effect on the computer, but keeps it safe. I don't do that though. If it doesn't work after disabling any software firewalls, then I'm lost, 'cause the settings should be fine.

[deathcloud33]

Well if you're doing just plain old 21, it's very possible your ISP may block that port, so that's the other advantage to going with a high-range port. That's the only thing I can think of at this piont. Things like Windows Firewall, Norton, McAfee, etc will probably keep it from working, too. I don't use any software firewalls since the router being a hardware firewall is enough.

Technically, FTP and HTTP servers are supposed to be in the DMZ where the router's firewall doesn't really have much effect on the computer, but keeps it safe. I don't do that though. If it doesn't work after disabling any software firewalls, then I'm lost, 'cause the settings should be fine.
Hmm.
That'd be annoying if my ISP blocked it. =/
I'll fire my server up again and see if I can get it working again.
Thanks for all the help.