RRAS and Passive FTP.

[Jim.J]

Hi all,
I want to use RRAS Basic Firewall /NAT for an extra layer of port blocking
and have configured everything except I cannot work out how to allow for
passive FTP. Passive FTP basically requires that a large range of outgoing
ports is open on the IP used for FTP. However i cannot find anyway to allow
all outgoing or a port range within RRAS. Does anyone know how to do this?
Thanks in advance for any input.

 

[Pawan Agarwal \(MSFT\)]

Passive FTP is done by FTP Editor. This is part of Aplication layer gateway
service. Make sure that service is running.
This component monitors all ftp traffic and as FTP negotiates the port
number where all future communication will take place it creates NAT mapping
and port opening for those ports.

look at following articles.
http://www.microsoft.com/windows2000/en/server/help/sag_RRAS-Ch2-Adv_16.htm

http://support.microsoft.com/?kbid=810639

 

[Jim.J]

Thanks for the reply, i realise i can edit IIS to restrict the ports but i
still willl need about 2000 open to allow for this busy server. I started
the Aplication layer gateway but it made no difference. Passive FTP was
still blocked by RRAS. Do you have a link to a specific kbase related to
passive FTP and RRAS or anything that can help me? Thanks again.