ftp port forwarding in xp pro

[G0ldeneye]

Hello,

I have to xp computers. One has two NICs that's running ICS for the other cpu. The other cpu on the private side has IIS ftp service set up on it. On the gateway cpu, I have the basic firewall on so I can modifiy ports, etc. I added a service called ftp and assigned it to 192.168.0.2 and when I put port 21 in, it said it was already in use. So I tried port 8484 because that's another port I've used before at work. On the cpu thats providing the ftp service, I assigned it to use port 8484 in the IIS console. So when I open a browser and type in ftp://**.**.*.**:8484 it says "windows cannot access this folder....a connection with the server could not be established". Can anyone help please?

 

[bcastner]

Maybe.

http://www.practicallynetworked.com/sharing/ics/icsconfig_maps_pg2.htm

If you really are serious about the web server, buy a hardware router.

 

[G0ldeneye]

I downloaded ICS config and when I start it, it says "ICS is not installed. The optional Windows component 'Internet Connection Sharing' is not marked as 'installed' in the registry. This program will not provide any useful info nor perform any useful functions unless ICS is installed. It can be added by using the add/remove programs applet..."

I tried to paste the picture of the error message in here instead of typing it all out, but it wouldn't paste.

Anyway, do you know how to do port mappings using the advanced settings of ICS?

Thanks in advance.

 

[bcastner]

I confused you, ICS Config does not work with Win2k or XP, as there is no reason to use a seperate configuration utility.

You can do the port forwards natively:

http://www.microsoft.com/windows200...professional/help/howto_share_conn_config.htm

 

[G0ldeneye]

As soon as the money starts flowing I plan on buying a hardware router, but until then, I'd like to do without.

Here's what I've set up.

1. On the Gateway cpu, I added a service simply called FTP and entered 192.168.0.2 as the cpu hosting the service and entered 8484 for both external and internal ports to use.

2. On the ftp server (192.168.0.2), In IIS I set the ftp service to use port 8484. I did not enable the ICF on this cpu because it isn't necessary since my gateway already has this. Anonymous access is allowed. It uses the IUSR_[cpu_name] account.

Am I missing anything? Also, any good routers you recommend in the $100 price range?

 

[G0ldeneye]

One more thing. In IIS on the FTP server, I set the address to use 192.168.0.2 right? instead of (All unassigned).

 

[bcastner]

I honestly do not know if it will make a difference. The forwarding of ports you did should be sufficient, but I am surprised that you did not:

. forward both control and data ports required for ftp;
. use the standard ftp control port assignments.

For IIs (and other ftp service softwares) using any ports above 500 for ftp is not recommended. See:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q283679

While the following discussion is centered around a linksys router, the issues of ports and port modality under Windows is universal:

http://www.broadbandreports.com/forum/remark,1381832;root=equip,16;mode=flatites

 

[G0ldeneye]

Thanks for such a timely response!!

I tried entering port 21 but it said it was in use, because it is, on the gateway cpu.

How would I forward both data and control?... add another service? Do I put 21 in both internal and external port assignments?

Thanks Bill.

 

[bcastner]

You do not need to forward both 20 and 21.
See the entire discussion (although linksys centred) in my second post.