[SOLVED] IIS FTP Data Channel Port Range

[andy77]

Hello @ all,

i am having trouble to config the Proxmox Firewall to allow FTP Traffic for Windows IIS Server.
FTP Client is connecting to IIS FTP but stops at "Directory listing". When the Proxmox Firewall is disabled for that particular VM (running Windows IIS) the connection works well.

I have activated in the Firewall the macro FTP.

Any ideas?

Regards

 

[andy77]

Hi @ all,

I have now also specified in the IIS to use specific "Data Chanel Port Range" of "33000-33010" and also added this to the VMs Firewall, having the same problem.
http://prntscr.com/cf3grt
http://prntscr.com/cf3h42

 

[andy77]

When I use FTP without SSL, then the connection works.

 

[andy77]

Hi again, I did solved my "problem" It was my fault assuming that the "source port" is also in the range of the defined "Data Channel Port Range".
So the solution was to only declare the "destination port" in the Proxmox firewall to the specific "Data Channel Port Range" and leave the "source port" empty.

 

[LnxBil]

FTP can be a active protocol, maybe load conntrack_ftp modules and enable port 20 and 21.

 

[andy77]

Hi, thx for your reply. I am not sure if the module conntrack_ftp works with IIS, but anyhow. My solution with setting certain ports in IIS and opening it in Proxmox Firewall worked.

Regards