Problems with FTP server

[bluestrobe]

I switched routers a few months back and now people are reporting problems. My FTP server is sitting on a XP Pro/BulletProof 2.3 box with Zone Alarm Firewall (free version) sitting behind a Dlink DFL-200. The dlink doesn't give you the option of what ports to open (ftp-passthrough rule only opens port 21 from what I gathered) so I chose "all" for the protocols and left it that way for now. The problem is that some of my friends can log on just fine but others can't stay on the server. They log on and then time out before they can see the directories. I had them set their ftp client to "passive mode" but that doesn't change anything.

Is this how the dlink is supposed to be setup for a ftp server? What could be the problem?

 

[marulee]

So I am guessing you open a port? 21-TCP through the virtual server or trigger the firewall? Did you make sure you got the lastest firmware updated for your DFL-200? DMZ disabled? DFL is your gateway? (this is very important..) I used DFL before with my computer so hopefully you ask me again with above questions replied!

 

[ch33zw1z]

Is everyone trying to log on at the same time?

If someone from outside your network can login, but others can't, chances are it's a config issue on their end. Did they change any configurations?

 

[bluestrobe]

Originally posted by: marulee
So I am guessing you open a port? 21-TCP through the virtual server or trigger the firewall? Did you make sure you got the lastest firmware updated for your DFL-200? DMZ disabled? DFL is your gateway? (this is very important..) I used DFL before with my computer so hopefully you ask me again with above questions replied!

The DFL is the gateway. The port is 1224 on the ftp server and they have this port setup on their client. I have the latest firmware. Right now I have the ftp server IP address set to "all services" under Services. I also "ftp-passthrough" under Services in another rule, both in the "port mapping/virtual servers" screen. I changed the default port to port 1224 from 21 in the "ftp-passthrough" rule. This is a static IP outside of the dhcp range. I might try to have some from here try to log in if they could.

 

[spidey07]

Most definately a NAT problem. Google "running FTP server behind NAT" for ways to fix it.

Plus running it on a non-standard port can cause you a whole ton of problems. If you move it to the normal port all of your problems will most likely disappear.

 

[bluestrobe]

When I did have it on port 21 I was getting pinged about 80-100 times a day filling my log up. I'll check the google idea.

edit: I checked google and didn't learn anything new. I'll write it off that the clients are configured wrong since I have people who can access my server just fine.