If the server is set for passive connections, the server responds to the client (in this case IE) connection with a port to connect back for the data connection. Your new firewall probably has these high ports blocked by default. You need to determine what range of ports is defined on the WS-FTP Server for this purpose and open them on the firewall. I don't remember what the default range is, but it can be changed to whatever you are comfortable with.
Keith Keith A. Pass AVP, Network Security, Database Supervisor AMCORE Financial, Inc. 501 7th St Rockford, Il 61110 Telephone: 815.961.3809 Fax: 877.430.3019 Email: [EMAIL PROTECTED] --------------------------------------------------------------------------------------------- This information may be confidential and/or privileged. Use of this information by anyone Other than the intended recipient is prohibited. If you received this message in error Please inform the sender and remove any record of this message. --------------------------------------------------------------------------------------------- -gwavasig- >>> [EMAIL PROTECTED] 05/13/05 4:58 PM >>> I would definitely look at the firewall. If it's a PIX you can probably issue the "[no]fixup protocol ftp" command. I have seen similar things with a Netscreen firewall, where I allowed in all the built-in protocols: FTP, FTP-PUT, FTP-GET... And it did not work. Once I allowed only the default FTP it worked fine. I'm guessing it was working fine until you installed a new firewall. Hope that helps. Dan __o _-\<, (_)/(_)____ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith Sent: Wednesday, May 11, 2005 10:58 AM To: [email protected] Subject: Re: [WS_FTP Forum] Passive FTP and firewall and Internet explorer We're using WS_FTP Server 5.0. I'm not talking about WS_FTP Pro at all, to the best of my knowledge the customers in question are all using Internet Explorer 6 to access the FTP site. Scott Smith Network Administrator 248.489.1999 [EMAIL PROTECTED] Westside & Detroit Reprographics An ARC Company ------------------------------------------------- ----- Original Message ----- From: "Grimard, Ronald L" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, May 11, 2005 1:47 PM Subject: RE: [WS_FTP Forum] Passive FTP and firewall and Internet explorer Scott....what version of ws-ftp pro are you using?...and what version of ws-ftp-server are you running? By default passive mode is turned on in ws-ftp pro, Ron -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith Sent: Wednesday, May 11, 2005 1:14 PM To: WSFTP Forum Subject: [WS_FTP Forum] Passive FTP and firewall and Internet explorer I've been having an issue with many customers who can't access our FTP site. I believe every one of them is using IE to browse to the FTP site. I tried connecting myself from outside our network, and I couldn't even get in. That is, until i disabled the passive ftp option in the Internet Options in Windows. As soon as that passive ftp option was disabled, I was able to get right into the FTP site. I believe that my customers are probably having the same problem. The only thing that changed recently was we have a new firewall in place. I'm already asking the firewall manufacturer if there are any issues with passive ftp, but I want to ask the forum if any of you have any input on this? Thanks, Scott Smith Network Administrator 248.489.1999 [EMAIL PROTECTED] Westside & Detroit Reprographics An ARC Company ------------------------------------------------- Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/ <p><hr> <font size="1" face="Geneva, Arial, Helvetica, san-serif">CONFIDENTIAL COMMUNICATION: E-mails from JustWorks may contain confidential material for the sole use of the intended recipient. If you received this e-mail in error, please delete the e-mail and all attachments. Thank you.</font><font size="2" face="Geneva, Arial, Helvetica, san-serif"> <font color="#0000FF"><strong>JustWorks</strong></font> - we make I.T. Simple. <font size="1">(866) JUSTWORKS</font></font> <hr></p> Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/wsftp_forum%40list.ipswitch.com/
