Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

Accessing Exteral FTP from inside an SBS2003 R2 Network

5 views

Skip to first unread message

John Herdman

unread,

May 19, 2007, 4:05:00 PM5/19/07

We are using SBS2003 R2 Standard so no ISA Server.

As we design websites we need to access FTP sites on our dedicated online
server. Outside our SBS network the FTP works without a problem, but from
within our network the FTP site doesnt work.

When trying to access the FTP via the FTP DOS command the online server says
it wont allow our IP address (thats the client internal IP address) to access
as the innitial connection was from our static IP address (the one facing the
internet)

We have 2 NIC's in our server. Any ideas?? The only way around this I have
found is to disable one nic and use the router to direct the required traffic
to the sbs box - not ideal.
--
John Herdman
IT Manager
PC Medic East Mids Ltd

Terence Liu [MSFT]

unread,

May 21, 2007, 3:44:20 AM5/21/07

Hello John,

Thank you for posting here.

According to your description, I understand that you can not access
external FTP site from internal client. If I have misunderstood the
problem, please don't hesitate to let me know.

This is a complex issue, I suggest we try to rerun the CEICW first to see
if there is any effect.

Go through the follow KB and Rerun CEICW again carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Meanwhile, please ensure the client computer's default gateway is pointing
to SBS internal network interface.

First, as you mentioned "it wont allow our IP address (that the client
internal IP address) to access as the initial connection was from our
static IP address (the one facing the internet)", it is seems the FTP
server block the FTP connection from your IP address. Please connect your
FTP server, and confirm that they do not block any traffic from your
network.

Meanwhile, I suggest we try the following steps to see if we can resolve
this issue:

1. In most cases, the outbound FTP issue could be related to the security
update MS05-019. The MTU change caused some network connectivity issues.
You may refer to the following KB article for the detailed information:
898060 Installing security update MS05-019 or Windows Server 2003 Service
Pack
http://support.microsoft.com/?id=898060

Since the Windows update feature is enabled on the workstations and the
server by default, the current network may keep the original version of the
update. I would suggest you download the new version of MS05-019 and then
install the hotfix onto the workstations and the SBS server. After doing
this, reboot the server and the workstations and then try the FTP access
again. Will the issue be resolved?

2. Test the FTP in different client mode. Open Internet Explorer, click
'Tools'->'Internet Options'. In 'Advanced' tab, modify the settings and
then try the FTP access:
a. Check 'Enable folder view for FTP site' option; uncheck 'Use Passive
FTP' option (The IE will work in Active mode FTP). Test this issue.
b. Uncheck 'Enable folder view for FTP site' option; check 'Use Passive
FTP' option (The IE will work in Passive mode FTP). Test this issue.

309816 How To Configure Internet Explorer to Use Both the FTP PORT Mode and
http://support.microsoft.com/?id=309816

3. If the problem persists, you may open regedit program. Navigate to the
following key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP\Parameters\

Change the value MaxUserPort to 40000. Reboot the server to see what the
result is.

4. If the problem still occurs, you may try the instructions in the
following KB article:
900926 Recommended TCP/IP settings for WAN links with a MTU size of less
than 576
http://support.microsoft.com/default.aspx?scid=kb;EN-US;900926

If we can not resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:

1. When does this issue begin to happen?

2. Can you access the FTP site from SBS?

3. Can you access other FTP sites from internal client, like
ftp://ftp.microsoft.com/?

4. Does this issue happen on all internal clients?

5. Do you have any evidence that the source IP address of the FTP packet is
the internal IP address of the LAN client? Please capture screenshots on
the error messages you get at command line and send the pictures to me at
v-te...@microsoft.com

I appreciate your time and look forward to hearing from you.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

0 new messages