IIS FTP (I have searched, trust me :) )

  • Hi All,

    I seem to have a somewhat unique problem. I have searched the docs, wiki and the forum and have spent the past 5 hours trying to get IIS to behave.

    PFSense 1.2Final as far as I can tell is working perfectly. I am using it to loadbalance multiple webservers. However I am trying to get IIS FTP to send the correct IP when a user tries to use PASV mode. I have opened up the port ranges in NAT and Firewall rules to point to the box running the FTP server and that works but, and here's the kicker. PFSense is sat behind our Cisco firewall and the webservers are on the DMZ. Our firewall translates the DMZ IP of 10.x.x.x to an external IP. The webservers are connected internally on a second interface and run on the 192.168.x.x range. IIS FTP sends along this 192.168 range for PASV connections through PFSense and our firewalls Inspec rules cannot translate that to an external IP.

    This as far as I can tell is an IIS issue because there is no way in IIS6 that i know of to specify a PASV ip.

    Have any of you guys got some brilliant idea to help me fix this?

    Thanks in advance.


Log in to reply