Passive requires more ports open. You probably want to open the necessary ports, but only for the IPs of your customers.
The alternative is for clients to connect with Active mode as you explained. The only problem with this is that you displace your firewall burdens to your customers; basically you throw your security risks to your clients/customers. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith Sent: Wednesday, May 11, 2005 1:14 PM To: WSFTP Forum Subject: [WS_FTP Forum] Passive FTP and firewall and Internet explorer I've been having an issue with many customers who can't access our FTP site. I believe every one of them is using IE to browse to the FTP site. I tried connecting myself from outside our network, and I couldn't even get in. That is, until i disabled the passive ftp option in the Internet Options in Windows. As soon as that passive ftp option was disabled, I was able to get right into the FTP site. I believe that my customers are probably having the same problem. The only thing that changed recently was we have a new firewall in place. I'm already asking the firewall manufacturer if there are any issues with passive ftp, but I want to ask the forum if any of you have any input on this? Thanks, Scott Smith Network Administrator 248.489.1999 [EMAIL PROTECTED] Westside & Detroit Reprographics An ARC Company ------------------------------------------------- Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/
