Help with FTP Server & Netgear MR814 Router

[Wolvereen]

I have an FTP server on a computer on my local network (Internal IP is 192.168.0.10). My MR814 is at 192.168.0.1 and my realworld IP.

I have Port Forwarding turned on on the router, and port 21 forwarded to 192.168.0.10.

I have my FTP server up and running (BulletProof FTP aka G6 FTP) and set to port 21.

The server is online and shows the following at startup:

3/18/2003 5:22:38 PM - FTP Server On-line : IP(s) 192.168.0.10, on port 21

All looks fine to me, yet no one can get access to my server. I can hit it internally from 127.0.0.1 so I don't think its an issue with the Server program.

Any thoughts or suggestions from anyone as to where to begin to troubleshoot from next?

Thanks

[NeoMayhem]

You sure you are using the right external IP?

If you dont have a staic ip, it will change every day :wacko:

http://whatismyip.com ;)

[ItchyAnus]

Several things (from my experience using Serv-U):

You need to forward port 20 to the comp with the FTP server as well as port 21 or else people can't LIST files.

Since the comp with the FTP server is behind a router/firewall, you'll need to enable passive FTP on the ftp server. That's giving the FTP server a range of ports to use and give to clients. You'll need to open up this range on the router/firewall as well. Clients connecting to your FTP server will need to connect passively instead of actively. From my knowledge, all GUI based FTP clients support passive FTP. Windows doesn't by default; you need to turn on passive FTP in the advanced tab in Internet Options on the client's comp if you want to use window's FTP client, or FTP through IE.

Hope this helps. :)

[dr3w2k3]

Sounds like a problem with your router settings...try forwarding port 20 as well to your FTP server.

[+BeLGaRaTh Subscriber¹]

No one will be able to access the server, unless they are physically on the same network as yourself, as neomayhem pointed out, you need to give them your actual external IP rather than your Internal IP (192.x.x.x)

[Wolvereen]

  NeoMayhem said:

You sure you are using the right external IP?

If you dont have a staic ip, it will change every day :wacko:

http://whatismyip.com ;)

Yeah, def using the right external IP. Went to my routers Status screen and double checked it agains www.whatismyip.com.

My IP is dynamic, but changes very rarely (same IP for 8+ months now). I even released and renewed and grabbed the same IP....

[NeoMayhem]

  ItchyAnus said:

Several things (from my experience using Serv-U):

You need to forward port 20 to the comp with the FTP server as well as port 21 or else people can't LIST files.

Since the comp with the FTP server is behind a router/firewall, you'll need to enable passive FTP on the ftp server. That's giving the FTP server a range of ports to use and give to clients. You'll need to open up this range on the router/firewall as well. Clients connecting to your FTP server will need to connect passively instead of actively. From my knowledge, all GUI based FTP clients support passive FTP. Windows doesn't by default; you need to turn on passive FTP in the advanced tab in Internet Options on the client's comp if you want to use window's FTP client, or FTP through IE.

Hope this helps. :)

I have only port 21 open and can share files via FTP to anybody :p

I use a dyndns.org domain so it works with my static IP :p

[Wolvereen]

  ItchyAnus said:

Several things (from my experience using Serv-U):

You need to forward port 20 to the comp with the FTP server as well as port 21 or else people can't LIST files.

Since the comp with the FTP server is behind a router/firewall, you'll need to enable passive FTP on the ftp server. That's giving the FTP server a range of ports to use and give to clients. You'll need to open up this range on the router/firewall as well. Clients connecting to your FTP server will need to connect passively instead of actively. From my knowledge, all GUI based FTP clients support passive FTP. Windows doesn't by default; you need to turn on passive FTP in the advanced tab in Internet Options on the client's comp if you want to use window's FTP client, or FTP through IE.

Hope this helps. :)

I updated and allowed ports 20-21 through.

I am not even seeing anybody connect though when they attempt. I have some friends hitting both my DNS entry AND the direct IP. When they are doign it, I see nothing in BulletProof (normally it shows the person connecting on the right hand side).

Would a blocked port 20 allow for that kind of circumstance?

Anybody know off hand how I turn on PASV in BulletProof? Been looking but I dont see it...

[dr3w2k3]

What brand of router is it? If it is a Linksys and depending on the firmware you are using, check to see if SPI is enabled. If it is, even if you have the ports forwarded, your router will not let anything through that was not initiated by an internal PC. Just something to check... :D

EDIT - My fault...just saw the router brand...I dont know if Netgear has the option for SPI

[Wolvereen]

Sorry about the brand, its a NetGear MR814 (4 Ports + Wireless)

I found the PSAV settings in BulletProof, but I am nto sure what to enter for it.

Its looking for:

IP for PASV mode: (ISP Provided IP? or internal?)

Port range for PASV mode: ??

[username]

http://www.ipchicken.com

what does that say your IP is?

[dr3w2k3]

PASV IP is your EXTERNAL IP provided from your ISP. The PASV port range can be a range of any ports you specify. Just make sure you forward those ports on your router. Perosnally, I only allow 4 connections to my FTP site and I forward a range of 15 ports in the PASV range.

[Wolvereen]

  dr3w2k3 said:

PASV IP is your EXTERNAL IP provided from your ISP. The PASV port range can be a range of any ports you specify. Just make sure you forward those ports on your router. Perosnally, I only allow 4 connections to my FTP site and I forward a range of 15 ports in the PASV range.

I set it to my external IP, what shoudl I put the port range at 21-25?

I only allow about 4 people in at a time MAX since I am on a cable modem....

[dr3w2k3]

It can be any numbers. Dont use 21 though. Your clients will never have to know or see those port numbers so you could even use something like 23000-23015.

[Wolvereen]

  dr3w2k3 said:

It can be any numbers. Dont use 21 though. Your clients will never have to know or see those port numbers so you could even use something like 23000-23015.

Do I need to enable port forwarding on my router with that range as well?

Thanks by the way for al the help! Its a lot better than my alternative, which was to hit something hard...

[dr3w2k3]

I went through all this when I set up my FTP site so I can sympathize! ;)

Yes, you need to forward that entire range on your router to your FTP PC.

[username]

  Wolvereen said:

Do I need to enable port forwarding on my router with that range as well?

Thanks by the way for al the help! Its a lot better than my alternative, which was to hit something hard...

Yes, port forward 21 to you local ip 21

[Wolvereen]

  username said:

http://www.ipchicken.com

what does that say your IP is?

It has my external....

for obvious reasons though I'd rather not give it out. :-)

Please slam my server! I'd love for you to hack your way in...

You know, that kind fo thing....

[NeoMayhem]

Are you running a firewall on the computer? That would also block the port ;)

[username]

well we cant test it if we don't know it... and i highly doubt anyone could hack or would even try here anyways

[Wolvereen]

  NeoMayhem said:

Are you running a firewall on the computer? That would also block the port ;)

I am running Norton Internet Security, but I was running that before I got the MR814 router. It had no affect on the server when I was directly connected to the internet from my PC. Would it have an affect now with the router?

THX

[username]

software and hardware firewall is way overkill is you ask me, if you keep your PC updated, you have little to worry about anyways

[Wolvereen]

Yeah, I agree. Just hadn't gotten around to uninstalling it yet....

Though I do like its pop-up filter.... Will probably find a diff. one later w/o the firewall integrated...

[dr3w2k3]

  username said:

software and hardware firewall is way overkill is you ask me, if you keep your PC updated, you have little to worry about anyways

Not if you run a software firewall to monitor outgoing traffic. :p

[Wolvereen]

Wow, nothing worked. I have had friends helpign me out with hitting the site all night and still nothing. DNS translation is working fine (giving the correct IP). They have tried ot get in directly with the IP too. Its jsut that nothing seems to be getting past the router.