|
I have a piece of stupid software that uses the built-in windows XP FTP shell to connect to an outside server. This means no passive ftp, as XP's shell doesn't support passive mode. I have a PIX 515E running IOS 6.3(5) that does NAT on that network, and has a static address (not pooled) for the machine that does the ftp. FTP fixup is turned on for ports 20 and 21. The ftp client connects fine, but file transfers fail, or download at a whopping 1.7k a sec. (Even when the host is in the DMZ outside the firewall and thus on the same 100 BASE-T network). Can anybody else think of what might be causing this? Passive FTP connections work great, but the software won't do it. I've tried configuring reverse DNS records like they (cisco) say, but I still get nothing. What gives? WangNV fucked around with this message at 04:59 on Apr 18, 2007 |
#
¿
Apr 18, 2007 04:57
|
|
|
|
| # ¿ Apr 18, 2024 10:10 |
|
|
WangNV posted:I have a piece of stupid software that uses the built-in windows XP FTP shell to connect to an outside server. This means no passive ftp, as XP's shell doesn't support passive mode. I have a PIX 515E running IOS 6.3(5) that does NAT on that network, and has a static address (not pooled) for the machine that does the ftp. To answer my own question, don't hire stupid people to set up your router. The guy who put the thing together years ago enabled ftp fixup on both port 20, and 21. This meant it was try to fixup all the data connections, as well as the auth connection. This obviously was causing problems.
|
|
#
¿
Apr 20, 2007 20:51
|
|