pix 6.1(4)

[troyboswell]

I am having troubles in getting passive ftp to work through my pix. I have no troubles with normal ftp but the second I try to use passive ftp the connection never gets established. Is there something else that I need to add into my config below for passive ftp to work.

It is set as follows:

fixup protocol ftp 21

access-list outside permit tcp any host 1.1.1.2 eq ftp

access-list outside permit tcp any host 1.1.1.2 eq ftp-data

access-list inside permit tcp any host 1.1.1.2 eq ftp

access-list inside permit tcp any host 1.1.1.2 eq ftp-data

static (dmz,outside) 1.1.1.2 1.1.1.2 netmask 255.255.255.255 50 10

[umedryk]

In Passive FTP mode, both "Control" and "Data" channels are opened by the client. The client first opens the control channel over standard FTP port 21 and tells the server that it is operating in "Passive" mode. The server replies with the port number to which it is listening for Data. The client then opens the "data" connection to that port on the server. Data transfer starts.