Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Cannot get FTP to Work - disconnects

58 views
Skip to first unread message

Donny

unread,
Oct 29, 2007, 7:31:00 PM10/29/07
to
I am having problems setting up ftp on Server 2003 R2. I will explain in
detail the steps that I have taken.
Added ftp from the Add Windows Components off of Add/Remove Programs
Administrative Tools -> Active directory Users and Computers from Domain
Controller –
Added User Account
On DC I modified the Account Tab to specify the one computer that has a
direct VPN connection to the Internet.
On Server Domain5 I added a directory c:\FTPUser\Dummy
On Server Domain5 Administrative tools -> IIS Manager-> FTP Sites -> Default
FTP Site
New Virtual directory Added UserName pointing to CFTPUsers\Dummy
Set Username to have Read and List to FTPUsers and Dummy folder
I went to another external computer

C:\Users\Don>ftp ip.address
Connected to ip.address.
220 Microsoft FTP Service
User (ip.address:(none)): domain\username
331 Password required for domain\username.
Password:
230-
****USAGE WARNING****

230 User domain\username logged in.
ftp> pwd
257 "/username" is current directory.
ftp> bin
200 Type set to I.
ftp> prompt
Interactive mode Off .
ftp> dir
200 PORT command successful. 20 SECOND DELAY
Connection closed by remote host.
ftp>

Bernard Cheah [MVP]

unread,
Oct 30, 2007, 11:18:47 PM10/30/07
to
Mmm...
does it happen if you ftp.exe locally at the server ?

what's in between the external and the server?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message
news:F50FF006-2425-477A...@microsoft.com...

Donny

unread,
Oct 31, 2007, 8:07:03 AM10/31/07
to
Now this gets interesting. I can FTP without disconnect from inside the
network. However, a ls or dir doesn't return the list of files. It just says
that the command completed successfully. The directory permissions are list,
Read and execute.

I am coming into the server from the outside on a VPN connection that goes
straight to the ISP. There is no 3rd party firewall or router on this 2nd NIC.

Bernard Cheah [MVP]

unread,
Nov 1, 2007, 11:33:40 PM11/1/07
to
no listing even in local ftp server ? and you are sure that there are files
in the folder?
how about same local lan subnet client?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:45C659CC-E585-471D...@microsoft.com...

Donny

unread,
Nov 2, 2007, 9:46:01 AM11/2/07
to
I have one file in the directory. it is called banner.txt. It will become my
FTP login usage warning. All computers are the same standard Class C subnet.


Bernard Cheah [MVP]

unread,
Nov 4, 2007, 9:55:08 PM11/4/07
to
As I understand from your posts, your have a ftp server with 2 NIC,
the internal NIC connected to internal LAN work fine, right?
can login and dir listing? but not the external nic for vpn access. correct
?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:62DFB101-433A-46AC...@microsoft.com...

Donny

unread,
Nov 5, 2007, 9:41:02 AM11/5/07
to
Yes, That is correct. 2 NIC,s 1 internal on standard class C and 1 external
VPN. I can login on both NIC's. If I DIR on internal it does not show me the
file(s) but stays connected. The external drops the connection about 20
seconds after the DIR command.

Bernard Cheah [MVP]

unread,
Nov 20, 2007, 11:23:20 PM11/20/07
to
Sorry, been busy.
For external nic, any firewall in between. it still looks like some port
blocking issue to me.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:B50DA5E6-84FF-401F...@microsoft.com...

Donny

unread,
Nov 21, 2007, 9:57:03 AM11/21/07
to
I think that I will have to give up on this. I had wanted to set up sFTP and
felt that getting FTP running was a good prerequisite.

Yes the server has 2 NIC's. NIC 1 is an internal NIC to the internal
network. When I connect from a different server I can run any FTP command.
However, I can't use 'get' even if I have the file name and the dir / ls
command does not return any results even with files in the directory. I have
the users permissions set to read and list.
From the external NIC we use VPN. There is no Firewall in place for this. I
want to get a firewall with a DMZ on it but that hasn't happened yet. From
outside the company which i try from home, everything is the same as inside
the company except after the dir command or the get command the connection
drops in 15 - 20 seconds.

Could this be related to IIS settings? I had always understood that setting
up FTP was quite easy.

Bernard Cheah [MVP]

unread,
Nov 22, 2007, 9:00:15 PM11/22/07
to
I'm out of idea as well. From what you posted it looks like port issue, coz
you can get it but not dir listing, etc.
Also the 2 nic involved. You can try disable one NIC and see if it works
since there's no firewall in between.

IIS ftp config is simple, just that the network part is really mess up.
especially with NAT, passive mode, RRAS, and this one 2 NIC setup.

good luck.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:825ECDB6-8423-40A3...@microsoft.com...

Donny

unread,
Dec 29, 2007, 9:40:00 PM12/29/07
to
I have been assigned this problem again. I have discovered a different issue
than I first thought that I had. If I go on the server can type ftp localhost
I get the following:
Connected to server.domain
Connection closed by remote host

This is an immediate action by the server, there is no delay.
Can you offer some insight, Where could I get more information?

Bernard Cheah [MVP]

unread,
Dec 30, 2007, 10:10:42 PM12/30/07
to
ha! my outlook express only showing this thread :)
the rest of the thread posts have been removed.

so connection closed if you try ftp localhost.
can you check the ftp log?
i still think is the two NIC setup issue :)

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:074A90BF-FEED-4B3F...@microsoft.com...

Donny

unread,
Dec 31, 2007, 9:07:01 AM12/31/07
to
The 2 NIC's are configured identically except for the IP address Nic 1 is
192.168.1.101 and NIC2 is 192.168.1.102.

The ftp log (I think I got the right one - iis6.log) doesn't say anything
about a problem. I can ftp to my own server by address instead of localhost.
What does that mean?

Bernard Cheah [MVP]

unread,
Jan 1, 2008, 10:34:57 PM1/1/08
to
The ftp log by default is at %windir%\system32\logfiles\msftpsvcX


--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Donny" <Do...@discussions.microsoft.com> wrote in message

news:94BC8151-B7DF-4C74...@microsoft.com...

Alun Jones

unread,
Mar 18, 2008, 12:51:07 AM3/18/08
to
"Donny" <Do...@discussions.microsoft.com> wrote in message
news:94BC8151-B7DF-4C74...@microsoft.com...

> The 2 NIC's are configured identically except for the IP address Nic 1 is
> 192.168.1.101 and NIC2 is 192.168.1.102.

And yet, they are on two different networks? That doesn't make sense. Those
two NICs are, to IP numbering at least, on the same network.

This may be the heart of your problem - I think you're seeing a conflict
between the address that is requested, and the address that is used.

In IPv4, the default is to send traffic from the NIC that is the closest
next-hop to the destination address. This may not necessarily be the NIC
whose address your local end is bound to. I would start looking at whether
the server can ping machines on either network, and configure appropriate
subnetting to separate the two networks properly.

Some kind of a primer on IPv4 network addressing is a good idea at this
point.

Alun.
~~~~

0 new messages