w2k3 ftp server + RAS & VPN

Sorry for reposting, now it is September, I think more people are on this
list, because holiday's are over (for most of us).

I have setup Windows 2003 Server with RRAS VPN, NAT and IIS 6 as FTP server.
I did this without manually tweaking stuff, I have just followed the
included W2K3 wizards.

All needed applications work fine which include; Local File/Print server,
VPN connections, Remote Desktop and FTP server. There's just one problem
that I could not fix so far:

External clients that are themselves behind a NAT cannot use our FTP server.
External clients without NAT but with a direct Internet connection have no
problems (PORT or PASSIVE mode doesn't matter)
Hence I suppose from our server side it "should" be OK. What is the
difference for a PC which is connecting from behind
a NAT (or router)? How can we solve that problem?

Some more info:

PORT mode and PASSIVE mode have been tried, both without success (from
behind a NAT on client side)
Our FTP server runs on port 1994 (I have noticed port 1993 is being used as
data connection)
Clients from behind a NAT seem to be able to establish the control
connection, but no data connection, hence there's no directory listing or
whatever.

All help appreciated.
Perry

"Perry Diels" <perry.diels.DeleteThis@optivoks.com> wrote in message
news:OYpf54PcDHA.2408@TK2MSFTNGP10.phx.gbl...
 > Sorry for reposting, now it is September, I think more people are on this
 > list, because holiday's are over (for most of us).
 >
 > I have setup Windows 2003 Server with RRAS VPN, NAT and IIS 6 as FTP
server.
 > I did this without manually tweaking stuff, I have just followed the
 > included W2K3 wizards.
 >
 > All needed applications work fine which include; Local File/Print server,
 > VPN connections, Remote Desktop and FTP server. There's just one problem
 > that I could not fix so far:
 >
 > External clients that are themselves behind a NAT cannot use our FTP
server.
 > External clients without NAT but with a direct Internet connection have no
 > problems (PORT or PASSIVE mode doesn't matter)
 > Hence I suppose from our server side it "should" be OK. What is the
 > difference for a PC which is connecting from behind
 > a NAT (or router)? How can we solve that problem?

The remote (external) NAT/router needs to have the port for your FTP open.

--
Tom Kaminski IIS MVP
<a style='text-decoration: underline;' href="http://www.iistoolshed.com/" target="_blank">http://www.iistoolshed.com/</a> - tools, scripts, and utilities for running IIS
<a style='text-decoration: underline;' href="http://mvp.support.microsoft.com/" target="_blank">http://mvp.support.microsoft.com/</a>
<a style='text-decoration: underline;' href="http://www.microsoft.com/windowsserver2003/community/centers/iis/" target="_blank">http://www.microsoft.com/windowsserver2003/community/centers/iis/</a><!-- ~MESSAGE_AFTER~ -->