hya,
i have a broadban router from sweex.
now i want to use my ftp server, but noone can get in to my ftp.
whats the problem and how can i solve this?
i need help
Routers are based on NAT Firewall, it blocks all attempt to get in unless the connection was initiated by your system.
In order to be able to get in to your FTP Server from the out Side, the port of your FTP server has to be left open (usually it is In TCP port 21).
You have to look at your Router manual to see how you open ports (It also may be called Port Mapping, or Port Forwarding, or Port Access).
List of common ports here: Special Applications - Port List.
In order to be able to get in to your FTP Server from the out Side, the port of your FTP server has to be left open (usually it is In TCP port 21).
You have to look at your Router manual to see how you open ports (It also may be called Port Mapping, or Port Forwarding, or Port Access).
List of common ports here: Special Applications - Port List.
-
cenelson
You need to put that FTP box out on the DMZ. I would not use the same machine that I use for everyday computing (personal stuff) as the FTP server. You need to find a second computer for that, run a stable, secure file-server, stick it out in the DMZ with the proper settings for access.
go here for the router's manual and good luck:http://www.sweex.nl/product.asp?pid=144&s=3
go here for the router's manual and good luck:http://www.sweex.nl/product.asp?pid=144&s=3
- YeOldeStonecat
- SG VIP
- Posts: 51171
- Joined: Mon Jan 15, 2001 12:00 pm
- Location: Somewhere along the shoreline in New England
Forward port 21 to the IP of your box running the FTP. DMZ opens up all 64,000 plus ports....makes your computer defenseless out there...standing out totally naked on the internet. Port forwarding is much more secure...only open up the ports you need...all the remaining ports stay shut.
MORNING WOOD Lumber Company
Guinness for Strength!!!
Guinness for Strength!!!
in my experience, ports 20 as well as 21 need to be fwd. Put your PC behind your firewall/router, give it a static LAN side IP, fwd ports 20,21 to that static IP, your FTP server should work. ISP are getting slicker...they might block 21..sooooo use another port... 70,71 - of course you'll have to tell your FTP server to use the new port and also your clients who are connecting must know that.
If you use a PC firewall like zonealarm, you'll have to reduce the security level OR keep a list or rnge of IPs that are allowed in.
If you use a PC firewall like zonealarm, you'll have to reduce the security level OR keep a list or rnge of IPs that are allowed in.