dns issue

[NorthStarDA]

hello,

i have a router with dns and ftp ports forwarding to my dns and ftp servers on the inside of my network- whenever certain people try to ftp into my server via the outside IP address ftp://66.14.103.211, i can see in their status bar of their browser that it is trying to connect to 192.168.1.5 which is the internal address of the ftp server, which it obviously cannot connect to from outside my network- none of my dns entries are sent to that address either, all go to the external address.

so in a nutshell i guess the question is, what would make an ftp client on the outside of the network try to access the local ip of my server without dns forwarding it there?

thanks in advance

 

[FaiTHLeSS]

It most likely that your FTP server uses PASSIVE mode, the ftp will use another set of port range to allow data transfer. Some FTP server will allow you to set the FTP passive port range. Will need to forward this port range to your server.

Some routers also support FTP servers like this and automatically do it for you.

 

[ChrisAC]

I can connect to the external address just fine!

[chris@uranium chris]$ ftp 66.14.103.211
Connected to 66.14.103.211 (66.14.103.211).
220 Welcome to NorthStar FTP!
Name (66.14.103.211:chris):

If people are connecting to the IP address then DNS isn't an issue, and obviously your port forwarding is working so I can't see a problem with this.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[NorthStarDA]

right, i can connect as well- its very difficult for me to reproduce the problem, seems to be dependant on the client- i have a winxp laptop im on that can connect fine, when i try to connect from a mac, whether i use the dns name or ip address, i can see it try to access the internal address, then it times out.

i did put in the forward the range for passive FTP to the ftp server- i cant tell if it made a difference yet- since it always seems to work for me

thanks guys

 

[FaiTHLeSS]

Make sure the clients that are connecting are using PASV mode and not PORT mode.

 

[NorthStarDA]

wow, strange thing- i did the exact opposite and it worked, the mac client i was using WAS using passive mode, when i turned that off- i was able to connect no problems

thanks for your responses