我有一个Linksys RV042双WAN路由器(它可以直接响应*.*.*.*
任何stream量),我的FTP服务器正在运行Windows Server 2003 R2 SP2和IIS。
我的服务器的本地IP地址是*.*.*.*
我的路由器的端口转发configuration如下所示:
DNS [UDP / 53〜53] – > *.*.*.*
HTTP [TCP / 80〜80] – > *.*.*.*
FTP [TCP / 20〜21] – > *.*.*.*
转发的端口configuration如下所示:
MXToolBox.com报告我的端口是打开的。
我的服务器完全响应ftp://<Server's Local Name>/
从我的本地networking上的任何计算机。 从任何地方都可以匿名访问我的FTP服务器,我的服务器响应标准的FTP端口:20-21
但是,当任何人尝试访问ftp://joinedsoftware.com/没有响应。
我已经testing了内部和外部的电脑的DNS,似乎一切都解决了没有任何问题。
使用SmartFTP,这是日志显示的内容:
[12:45:20] SmartFTP v4.0.1122.0 [12:45:21] Resolving host name "joinedsoftware.com" [12:45:21] Connecting to *.*.*.* Port: 21 [12:45:21] Connected to joinedsoftware.com. [12:45:21] 220 Microsoft FTP Service [12:45:21] USER anonymous [12:45:21] 331 Anonymous access allowed, send identity (e-mail name) as password [12:45:21] PASS (hidden) [12:45:21] 230 Anonymous user logged in. [12:45:21] SYST [12:45:21] 215 Windows_NT [12:45:21] Detected Server Type: Windows NT [12:45:21] RTT: 6.702 ms [12:45:21] FEAT [12:45:21] 211-FEAT [12:45:21] SIZE [12:45:21] MDTM [12:45:21] 211 END [12:45:21] Detected Server Software: Microsoft IIS FTP Service [12:45:21] TYPE I [12:45:21] 200 Type set to I. [12:45:21] REST 0 [12:45:21] 350 Restarting at 0. [12:45:21] PWD [12:45:21] 257 "/" is current directory. [12:45:21] TYPE A [12:45:21] 200 Type set to A. [12:45:21] PASV [12:45:21] 227 Entering Passive Mode (*,*,*,*,6,64). [12:45:21] Opening data connection to *.*.*.* Port: 1600 [12:45:21] LIST -aL [12:45:34] 425 Can't open data connection. [12:45:34] PORT *,*,*,*,10,252 [12:45:34] 200 PORT command successful. [12:45:34] LIST -aL [12:45:34] 150 Opening ASCII mode data connection for /bin/ls. [12:45:55] 425 Can't open data connection. [12:46:25] NOOP [12:46:25] 200 NOOP command successful. [12:46:55] NOOP [12:46:55] 200 NOOP command successful. [12:47:25] NOOP [12:47:25] 200 NOOP command successful.
什么可能导致这种情况? 是否有这个路由器的已知问题,或需要设置特殊的路由器configuration?
由于FTP是一个可怕的协议(我说过了!):
[12:45:21] 227 Entering Passive Mode (173,14,245,129,6,64). [12:45:21] Opening data connection to 173.14.245.129 Port: 1600 [12:45:21] LIST -aL [12:45:34] 425 Can't open data connection. [12:45:34] PORT 10,0,0,200,10,252 [12:45:34] 200 PORT command successful. [12:45:34] LIST -aL [12:45:34] 150 Opening ASCII mode data connection for /bin/ls. [12:45:55] 425 Can't open data connection.
你看到你的FTP客户端试图打开第二个连接到173.14.245.129:1600? 这是“数据通道”,它使用单独的高数字端口来返回stream量/数据。 在被动模式下,服务器显示“请连接到数据通道的xxxx:y”。
您必须configuration一系列数据通道端口号以在您的FTP服务器中使用,然后通过防火墙允许它们通过。 除非您允许所有出站stream量,否则活动模式可能无法正常工作。
另外,对于任何计算机上帝可能或不可能的爱,请不要打开NetBIOS和LDAP到公共互联网,然后发布您的IP地址在ServerFault上!