PIX Firewall

[intel]

I looked though the forums and I am not seeing anything that will help. I have the FTP on port 444. I have an access list that allows traffic on the internal IP to 444 but I can;t connect. Is there something else I need to do in the router/ioftpd config??

Its a PIX 501

TIA

[KingYes]

Is it problem with passive mode ?

[intel]

I cant even connect so I dont know what is going on. In Ultrafxp it just says connection timed out.. I know that ioftpd is started.

[KingYes]

are you have timed out? or u can to connect but you can't to see files?

plz give me more information for to help you.

[intel]

I cant connect as I said. Just says Connection Timed out

[KingYes]

ok.
If you are running that ioftpd on your computer, and you are connecte with localhost. so I don't know what is problem.

But if are you running ioftpd on your server (not localhost), so it's not problem with ioftpd. Just that port not opened !

so.. for check what is port open or not. Try to connect in your ftp client on your port. If u got "connection refused", so It's ok. You can to running your ftpd in that port. but if you got timed out. so that port not open.

Good Luck ! :)

( sorry on my english. )

[LordM]

maybe you should determine, if it's really a firewall problem. Turn it off and try connecting.
I guess, it's not a firewall problem but you maybe didn't edit etc\host.rules correctly so external connections are blocked by default.

[Yil]

1) First verify the process is running. Looks like you did this, but starting it isn't the same as making sure it's still running...

2) Can you connect to ioftpd by running an ftp client on the same machine? You haven't proved to me ioftpd is OK yet.

3) If you can't connect locally use "netstat -an" from a command line to verify that the port your trying to run ioftpd on is listening for connections. Goofing up the Bind= line in ioftpd can prevent it from listening on any port at all. Also, port 444 is (<1024) so you probably need admin rights to setup a service on that port for security reasons.

4) I don't think a wrong config in etc/host.rules results in timed out connections, I think it just forcefully rejects them so I don't think that's the problem, but double check that.

5) Look at the firewall log and see what it says... If ioftpd is up and running the firewall is probably recording (or can be told to) why it's rejecting the connection attempts.

[intel]

I can connect by using a pc on the same network. I know its a PIX problem because if I use a linksys or d-link I can through it the DMZ zone and everyone connects. From what I can find the PIX 501 does not have that feature. I think it is a matter of opening ports but I have tried opening port 444 (which is what is configured in ioFTPD).

[LordM]

then open port 444 and 443. And retry.

[KingYes]

Maybe is it problem with PASSIVE MODE ?

[dink-puller]

Windows Firewall LOL!
Hosts.Rules LOL!

DENY I 192.168. "Banned network address"

[LordM]

I can connect by using a pc on the same network. ...

Looks like network access is possible.