fpt connection problem

[marco cochet]

hi all,
i have the following problem:
i have a network with router and a c3000 with hp-ux 11.11 + 1 pc with windows xp.
on my c3000 is a ftp-server installed on port 1021 and data-port 1020.
when i connect with windows xp to that ftpserver in my network i have no problems.
if i do the same with the external ip adress i get a illegal port command error and occasionally and time-out error.
here comes the strange part:
when i log in in a dos window with command-line ftp it works perfect.
the restrictions as prescribed in the attachement are applied.
any little help to this unix newbie would be greatly appreciated.
thanks in advance

[Rajeev Shukla]

Hi,
If i understand your problem, you have is doing ftp from external netwrok, where as ftp from same network works for you.
Ok since you are using different ports for ftp there could be chances that these ports are restricted on router side. Have a look at the access control list of router to see if problem lies there.

Cheers
Rajeev

[Caesar_3]

Hello!

Could be that some firewall block the connections to this ports from out side.

Caesar

[Wouter Jagers]

Are your server and your XP pc both on the same side of the router ? If so, it might be that the router is not expecting your PC to contact its external interface only to go back in.

Have you already tried connecting from some place on the other side of the router ?

[Sridhar Bhaskarla · Accepted solution]

Hi,

I concur with the others that this could be a firewall/route accesslist issue.

Since both your windows system and the HP system are on the same wire (local network), the setup is working. This also confirms that your setup on HP system is fine.

Look at the accesslist on the router to allow the ports 1020 and 1021 from outside. If you are using a firewall, check the restrictions there too.

-Sri

[marco cochet]

thanx for the responses all.
it indeed was a router issue.
i had to specifie a non-standard ftp-port.
but i still cannot make access by troughout another provider.
its working fine as long i stay within the network from my own provider
is it possible that they can block non-standard ftp ports?
thanks in advance
P.S. my ftp port is 1024

[Sridhar Bhaskarla]

Hi Marco,

Did your ftp ever work even on the traditional port?.

There are two connections involved here. One control connection to your port 1024 and another to your data port to 1020 (as per your original message). Firewalls refusing to any of these ports could cause problems.

Try passive mode. On the client side use "ftp -n" followed by "passive" and then open your IP address with the port 1024. Here server will open a port and sends it to the client instead of the traditional otherway.

On the external client, try

ftp -n
>passive
>o your_c3000 1024

.. proceed as usual from there.

-Sri

[Caesar_3]

Hello!

Check the connection of your ftp by
using the standart port of ftp.
See if it could connect.

What type of router you use, what his
posabilitys (block ports, access deny)?

Caesar