Please Help Me Configure Router for FTP

[BikerBob]

Similar problem here, only I *did* have it working before modem failed. 

New modem arrived, and after 2 hours of fighting the 'Wizzer' that came on the included CD, I threw the disk out, connected to http:192.168.1.1, and got the modem at least partially working, enough to get email and www access.

Here's what I got: 

Filezilla working on machine 192.168.1.2.

I can access it from same machine, using command line FTP and IE, as long as I use addresses 127.0.0.1 or 192.168.1.2.

I can go to machine 192.168.1.3, and connect with command line FTP and IE to address 192.168.1.2.

Then, I find my ActionTec's router IP, which matches the one that 'whatsmyip.com' tells me, and try to connect to that address. Nada.  Connection refused.  I call friend, give my current address, and ask them to connect via FTP: same thing. Connection Refused.

I have port forwarding set for FTP to go to this machine, windows firewall off.  I even tried with this computer being the DMZ one, after first turning the other settings off.   For both these attempts, the router filewall set to 'Minimum Security--Inbound policy:Accept.  It just won't work from anywhere beyond the router, and will only work on the Local Lan.

Running out of ideas with this modem.....maybe its time to switch back to the local cable company?

...Bob

[dslr595148]

#1 To get FTP working, I believe that you must also forward port 20.

#2 After forwarding port 20 and 21 to your computer, use any of the following port checkers...

grc.com shields up

http://www.dyndns.com/support/tools/openport.html

http://www.whatsmyip.org/ports/

http://www.canyouseeme.org/

#3 What is the result (or are the results)?

#4 Please do not post your IP on this message board. Instead: If you want someone to know it, please IM them.

[BikerBob]

ok...lemme try retyping again.  Problem with this new modem constantly disconnecting/reconnecting, and when I finished typing and press "POST" I get 'authentication token failed.

Here is what I tried:

Set up FTP server on LAN, test, and it works among my computers.  Port 21.

Set up the ActionTec router for port forwarding:

1. log into router.

2. pick 'Firewall Settings' at top center

3. answer 'Yes' to the warning. I see 'Minimum security (low)' is picked

4. pick 'Port Forwarding' on left

5. pick red 'Add' near bottom

6. for 'Networked Computer/Device' find my computer name in pulldown list

7. for 'Protocol' pick red 'Add'

8. for 'Service Name' enter 'Custom FTP'

9. click red 'Add Server Ports

10. for 'Protocol' pick 'TCP'

11. for 'Source Ports' leave as 'Any'

12. for 'Destination ports' pick 'range'

13 enter 20 and 21 into the range

14 click 'Apply'

15 click 'Apply' again

16 click 'Apply' yet again

17 see entry for my computer, Custom FTP - TCP any -> 20-21 active

18 click yet another 'Apply'

Now I think I'm done.  Now I go to:

grc.com, and test 20, 21:  Ports are CLOSED

dyndns.com  : both ports 'attempted connection was refused'

whatsmyip:  both ports are closed

canyouseeme : connection refused for both ports.

Did I miss some other setting?

...Bob

[BrianMcD]

Here is a good site for Port Forwarding Information on various routers:

http://www.portforward.com/english/routers/port_forwarding/routerindex.htm

Before going thru these steps all of my ports at GRC.COM (ShieldsUp) were showing as Stealth.  Note that I have the Rev E Version of the Actiontec with the 20.9.0 Firemware.

I did the following steps:

My PC was already setup with a Static TCP/IP Address which is outside my DHCP Scope.

Logon to Actiontec

Select Advanced (Top)

Select Protocols

Saw that FTP was Pre Defined for Port 21

Selected Firewall Settings (Top)

Left Settings at Typical Security (Medium)

Selected Port Forwarding (Left)

Clicked on Red Add

Changed Local Host Address to the Static TCP/IP Address of my Workstation

Selected FTP Under Protocol

Left  Wan Connection Type Set to: All Broadband Devices

Left Forward to Port Set to: Same as Incoming Port

Left When should this rule occur Set to: Always

Clicked on Apply

Brings me to the Port Forward Screen with the new Rule Added

Clicked on Resolve Now at Bottom of Screen

After going thru these steps all of my ports at GRC.COM (ShieldsUp) were showing as Stealth. Except for Port 21 which was showing as Closed.  My Software based Firewall was blocking the Port 21 Traffic, but it was getting thru the router.

[dslr595148]

#1 In your router, be sure to forward the port(s) to your computer.

#2 If you are forwarding to your computer, make sure that you start the server for what ever you are forwarding for.

[BikerBob]

ok, I was doing some more testing. Seems I can open a bunch of ports, but ONLY the UDP ones actually get forwarded.  The TCP ones appear listed on the router as forwarded, just like the UDP ones do.  But when I check the 'security log' on the router, I only see connection attempts that are UDP.  No TCP connections except for the

TCP ...................->192.168.1.100:63145 on clink0, which is to my STB.

Attempts to check openness of ports from grc, dyndns, whatsmyip, canyouseeme get met with 'connection refused', and PortForward.com's PortChecker only finds my UDP forwarded ports open, and my TCP forwarded ports 'NOT OPEN or not reachable', with no indication of blocked access in the 'security log' on the router.

I'm thinking incoming TCP connections are 'blocked' somewhere before they get to me.

...Bob

[BrianMcD]

Check your Firewall Settings, General.

Try setting it to Low to see if that allows the traffic thru.