FTP server inside a CP FW-1 NT firewall

[b2bill]

Hi! Would someone be able to walk me through the process of configuring FW-1 to allow staff on the Internet to FTP files to an NT4/IIS4 server I've set up inside my network? Please be as basic as possible ... I don't have much background with this firewall (prefer ISA Server)

Thanks in advance!

 

[Piloria]

i presume that you are not wanting to authenticate (via the firewall) users and are relying on username / password

First you need to create a network object for the server
Manage - network objects - New - Workstation
give it a name (FTP_Server)or if it is known via dns that name
enter IP address if Get doesnt work
leave all other general setting as they are.

to protect your internal network select the NAT TAB
check box -Add automatic address translation Rules
set translation method to static
enter a valid IP address for the outside of your firewall.


after your stealth rule (any-firewall-any-drop)
create a new rule
(highlight the stealth rule)
Edit - Add rule - after
leave source as any
change destination to your ftp server RMC (right mouse click) add - select ftp server

change service to ftp (RMC add ftp)
change drop to acceptset track to long
add a comment at the end of the line

install policy
Policy - verify
if this works
policy install - ok


hope this helps.