ftp trouble (3) - routing?

[Robert Slade]

Stewart thanks for the reply.

> > Connecting to the external IP address of ftp server from a machine on
> > the internal network, passive mode works, but active mode hangs:
> 
> Perhaps your smoothwall is not set up to proxy active mode FTP.
> Try connecting to e.g. ftp.lantronix.com and logging in as
> "anonymous" with your email address as password.  You should be
> able to do a directory listing.  If this works in passive but not
> in active, I'd first suspect the smoothwall, then the D-Link
> configuration.

>From the machine on my internal network which I had had the above
problems worked ok - Both IE6 and the Command Window allow me to access
and use Dir etc which suggests that the smoothwall and d-link are ok.

> 
> > I get similar results when connecting from an external machine, in this
> > case it is a Windows XP machine, using FTP then ls at a command window
> > gives
> 
> > 200 PORT command successful. Consider using PASV.
> > 150 Here comes the directory listing.
> 
> > and then it hangs which implies that neither passive or active mode
> > works.
> 
> May not be true.  Standard command line FTP in Win XP cannot do passive
> mode at all.  You can try passive mode from Internet Explorer.
> Is that machine directly on a public IP with no firewall or NAT?

The FTP server is on a public IP with no FW apart from the FC2 FW with
the FTP box checked in security level. 
 
> 
> > I have eliminated the firewall on the FTP server as the problem by
> > turning off iptables.
> 
> > As an aside, my local network is behind a firewall (smoothwall) which is
> > using the external address of xxx.xxx.xxx.251.
> 
> If the problems are not on the client side:
> 
> Traceroute to your FTP gives a response from D-Link with address
> xxx.xxx.24.249 . Is that its WAN address?  If so, what is its
> default gateway?  Is the ADSL modem built into the D-Link?
> If not, perhaps you can test with the gateway bypassed.

The setup I have is:

	ISP

	 |

Dlink Modem/router - modem IP address allocated by ISP xxx.xxx.24.249
		     Lan IP address xxx.xxx.24.250. 
	|			|			|

xxx.xxx.24.251		 xxx.xxx.24.253		    Mail Server etc
    			      eth1
Gateway to Internal	   FTP Server 
	NW
			      eth0
  (Smoothwall)			|			|

192.168.0.1		192.168.0.55		192.168.0.etc


The Internal IPs are on the same subnet and connected through a switch.

The Dlink is a combined modem/router/switch 

I have set the FTP server's default gateway as xxx.xxx.24.250 as that is
the next IP address 'up the line'. As I said this appears to work with
the mail server.

Rob











> 
> --Stewart