Need help setting up a FTP server behind a firewall with IIS - Tilted Forum Project Discussion Community

Ganguro · 10-17-2003, 08:41 AM

first and foremost.. here are answers which arent acceptable

1) no im not switching to Linux

2) No im not buying a router or hub
3) Id prefer not to have to buy any additional software, and would like to stick to my current setup

Now, with that nastiness out of the way let's get down to business.

My home setup is very simple.
Cable modem goes to PC#1 (firewall)
PC#1 shares cable connection with pc#2 (FTPserver) via a crossover cable and an additional NIC.

Both PC's are running windows 2k as their OS. PC#2 has IIS installed and has the FTP server running. It is running correctly because when i type in the internal IP addy on PC #1 i can log into the FTP server.
How can i enable non local persons to see the FTP server behind the firewall?
Also, i would like to use a free dns service like DynDns and have signed up with them, gotten a name, and have updatd their database witha recent ip addy.

I've used dyndns before with another client, just for some reason im missing a step inbetween setting up the PC#1 with dyndns, and getting the PC#2 visible to the internet versus the intranet.

Any suggestions?

Boner · 10-17-2003, 09:00 AM

What is the firewall on PC1?

Ganguro · 10-17-2003, 09:08 AM

I assumed the PC was acting as the firewall.. but zonealarm pro is running on it, if that helps.

Boner · 10-17-2003, 10:15 AM

Are you using Internet Connection Sharing to provide access to the second PC?

yodapaul · 10-17-2003, 11:14 AM

Quote:

Originally posted by Ganguro
I assumed the PC was acting as the firewall.. but zonealarm pro is running on it, if that helps.

That is one problem, zone alarm must be either configured to allow ftp requests to go to the other computer. Also the ICS DOES NOT support passing ftp to an internal server. You will need third party NAT software to make this work.
ICS was made to pass Internet, mail, and ftp; to clients on the internal network.

Boner · 10-17-2003, 12:03 PM

ZoneAlarm will definitely complicate things. I would disable it while setting everything up.

Quote:

Originally posted by yodapaul
Also the ICS DOES NOT support passing ftp to an internal server. You will need third party NAT software to make this work.
ICS was made to pass Internet, mail, and ftp; to clients on the internal network.

I believe it does support it:

(Disclamer: I am running Windows 2000 Pro)

Go the network adapter settings.
Click Sharing
Check Enabled Connection Sharing

Click the settings button
Select the Services tab
Click FTP server, enter the appropriate internal IP address

Also, its worth mentioning that many cable ISP block incoming FTP, so it may not be accessible from the Internet.

Ganguro · 10-17-2003, 03:48 PM

ok im home to fuck around with it now.. i've already done your suggestion Boner, i had the wrong internal IP down.. im testing right now.

10-17-2003, 08:41 AM	#1 (permalink)
Ganguro Army of Me	Need help setting up a FTP server behind a firewall with IIS first and foremost.. here are answers which arent acceptable 1) no im not switching to Linux 2) No im not buying a router or hub 3) Id prefer not to have to buy any additional software, and would like to stick to my current setup Now, with that nastiness out of the way let's get down to business. My home setup is very simple. Cable modem goes to PC#1 (firewall) PC#1 shares cable connection with pc#2 (FTPserver) via a crossover cable and an additional NIC. Both PC's are running windows 2k as their OS. PC#2 has IIS installed and has the FTP server running. It is running correctly because when i type in the internal IP addy on PC #1 i can log into the FTP server. How can i enable non local persons to see the FTP server behind the firewall? Also, i would like to use a free dns service like DynDns and have signed up with them, gotten a name, and have updatd their database witha recent ip addy. I've used dyndns before with another client, just for some reason im missing a step inbetween setting up the PC#1 with dyndns, and getting the PC#2 visible to the internet versus the intranet. Any suggestions?

10-17-2003, 09:00 AM	#2 (permalink)
Boner Insane Location: Plugged In	What is the firewall on PC1?

10-17-2003, 09:08 AM	#3 (permalink)
Ganguro Army of Me	I assumed the PC was acting as the firewall.. but zonealarm pro is running on it, if that helps.

10-17-2003, 10:15 AM	#4 (permalink)
Boner Insane Location: Plugged In	Are you using Internet Connection Sharing to provide access to the second PC?

10-17-2003, 03:48 PM	#7 (permalink)
Ganguro Army of Me	ok im home to fuck around with it now.. i've already done your suggestion Boner, i had the wrong internal IP down.. im testing right now.