FTP Users behind NAT
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
FTP Users behind NAT

 
Post new topic   Reply to topic    Windows Server Forum Index -> Networking
Author Message
Michal Fryda
Guest
Posted: Wed Nov 09, 2005 1:50 pm    Post subject: FTP Users behind NAT Reply with quote
Hi !
Have a little problem witn win 2003 server NAT. All my users are behind NAT
and the problem is when they are trying to log to ftp server outside of
company.
They authenticate to it and when they suppose to receive list of directories
they are dosconected. When using passive FTP it works fine. Anyone knows
some solution ? There is not firewall on server.

Thanks a lot in advance.
Back to top
Phillip Windell
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
"MichalF" <fryda@cns-net.cz> wrote in message
news:eqgFV%23T5FHA.3544@TK2MSFTNGP09.phx.gbl...
Quote:
Well there must be way how to make it use active FTP

Most likely not.
NAT does have *limitations*
That is why "Passive" was invented.

Passive is the only way I have ever seen it work from behind a NAT Device
--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
Back to top
Chris Priede
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
Hi,

Michal Fryda wrote:
Quote:
They authenticate to it and when they suppose to receive list of
directories they are dosconected. When using passive FTP it works
fine.

This is normal. By design, active FTP isn't intended to work with the
client behind NAT; if it ever does, it is only when the NAT routing software
in question specifically looks for FTP control messages passing through,
alters them, and automatically forwards ports.

Quote:
Anyone knows some solution ?

Use passive FTP. This is exactly why it was invented.


--
Chris Priede
Back to top
MichalF
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
Well there must be way how to make it use active FTP

"Chris Priede" <priede@panix.com> píše v diskusním příspěvku
news:uiEQI2T5FHA.1276@TK2MSFTNGP09.phx.gbl...
Quote:
Hi,

Michal Fryda wrote:
They authenticate to it and when they suppose to receive list of
directories they are dosconected. When using passive FTP it works
fine.

This is normal. By design, active FTP isn't intended to work with the
client behind NAT; if it ever does, it is only when the NAT routing
software in question specifically looks for FTP control messages passing
through, alters them, and automatically forwards ports.

Anyone knows some solution ?

Use passive FTP. This is exactly why it was invented.


--
Chris Priede



Back to top
Pierrot Robert
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
And why don't you want to use passive ftp ?

MichalF wrote:
Quote:
Well there must be way how to make it use active FTP
Back to top
MichalF
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
Well i dont really have problem with that but not all of FTP servers support
passive connections. So thats why i need that . :-(


"Pierrot Robert" <mcthepro_at_hotmail.com> píše v diskusním příspěvku
news:uLeSuKU5FHA.4036@TK2MSFTNGP11.phx.gbl...
Quote:
And why don't you want to use passive ftp ?

MichalF wrote:
Well there must be way how to make it use active FTP


Back to top
Chris Priede
Guest
Posted: Wed Nov 09, 2005 5:50 pm    Post subject: Re: FTP Users behind NAT Reply with quote
Hi,

MichalF wrote:
Quote:
Well there must be way how to make it use active FTP

Due to your insistence on not living with just passive FTP, I've looked at
the docs and it would appear that NAT in Windows 2003 RRAS has active FTP
translation support, but you have to enable it with:

netsh routing ip nat add ftp

This is documented here (watch out for long URL wrap):

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/528b4062-5b08-4b82-853b-188f4e9f04df.mspx

Hope that helps.

--
Chris Priede
Back to top
MichalF
Guest
Posted: Thu Nov 10, 2005 9:50 am    Post subject: Re: FTP Users behind NAT Reply with quote
This works ! Thanks a lot !

"Chris Priede" <priede@panix.com> píše v diskusním příspěvku
news:eVwc2eU5FHA.1536@TK2MSFTNGP12.phx.gbl...
Quote:
Hi,

MichalF wrote:
Well there must be way how to make it use active FTP

Due to your insistence on not living with just passive FTP, I've looked at
the docs and it would appear that NAT in Windows 2003 RRAS has active FTP
translation support, but you have to enable it with:

netsh routing ip nat add ftp

This is documented here (watch out for long URL wrap):

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/528b4062-5b08-4b82-853b-188f4e9f04df.mspx

Hope that helps.

--
Chris Priede
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Networking All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB