Smoothwall blocks FTP access

[gkdog]

I've hooked up smoothwall to protect a small network and everything works OK except that I can't access my FTP server from the internet (red zone).
I have allowed access to Ports 80 (HTTP) and 21 (FTP) and also forwarded the the ports to the relevent server.
The Web server works fine (IIS) but FTP doesn't. FTP works fine when accessed from within my network (green zone).
Does anybody have any ideas ?

Regards GKDOG

 

[dbase77]

Hi,

When you try ftp from internet to port 21, what error msg did you get? Can you put log entry on your rules to lock any ftp attempt?

You need port 20 open as well for data (active mode). Passive mode you dont have to open port 20.

regards,
feroz

 

[gkdog]

The following error was encountered :-

Read Error
The system returned:

(131) Connection reset by peer
An error condition occurred while reading data from the network. Please retry your request.


You might want to try yourself (ftp://kipper.mine.nu)

 

[dbase77]

Hi,

Is your ftp server open 24/7? Have you try turn on the LOG on your firewall rule for port 21 as well as 20?

regards,
feroz

 

[gkdog]

The following ports are enabled for access:-

TCP ALL 113
TCP ALL 80
TCP ALL 21
TCP ALL 81
TCP ALL 445
TCP ALL 20

Ports are forwarded :-

TCP 80 10.10.1.1 80
TCP 21 10.10.1.1 21
TCP 20 10.10.1.1 20

I can't see what is wrong ...............

GKDOG

 

[sleipnir214]

FTP doesn't just use one port.

If you are using active FTP, the server must listen on ports 20 (the data port) and 21 (the command port)

If you are using passive FTP, the server must listen on port 21 (the command port) and a second non-privileged port which is not static.

Take a look here for what is going on with FTP and ports:

http://slacksite.com/other/ftp.html

Support for passive FTP requires that the firewall employ stateful inspection in order to know which ports it needs to open for the data connection from the client to the server.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!

 

[gkdog]

Checking the IIS FTP logs It reports that a connection was made etc - in fact it looks like everything should have been OK
It's very strange........
I'm at a loss