Cisco 1712: FTP issue

[tobiaseichner]

We use a Cisco 1712 router that connects over a switch our servers as well as our LAN with the Internet.

Strangely I experience the behavior that from within the LAN I can access our connected server over its WAN-IP by ftp using a WinXP notebooks, but not with an Apple notebook.

The Apple can connect by ftp to other servers at the Internet at no problem. Also a connection via sftp or ssh-ftp to our server works well. It just seem to time-out when trying ftp (ftp connection is established, asking for user and password, when trying to read files or directories - it hangs without errors, but times out after a minute).

So since I can exclude the server as well as the notebooks as an error source, I feel that it has something to do with the 1712 router.

But I have no guess what's wrong there. Is somebody able to assist me with this issue or can provide hints where to look first ?

[Richard Burts]

Tobias

There might be several issues which could produce the problem that you describe. The first thing that I would check for is the possibility of an access list. When some protocols do work between end stations but some other protocol does not an access list is probably the most common cause of this. So perhaps you could post the config of the router and let us see if there are access lists involved.

Another possibility might be that Policy Based Routing is configured and is interferring with FTP for the particular station. Again posting the router config would help us to understand what is going on.

I have also seen am implimentation of FTP that does a DNS lookup on the requesting address of the FTP request and will not process the request if the DNS resolution is not successful. Is there possibility that DNS reverse lookup is not working for the Apple notebook?

HTH

Rick

[tobiaseichner]

I have posted the router configuration at my other post, noticed that you replied there also :-)

Well, the Apple requires passive ftp when enabling its firewall, which I have done and can successful access other ftp sites.

Our domain name record resolves successful as tested with DNS report, see http://www.dnsreport.com/tools/dnsreport.ch?domain=starenterprise.com (in fact, our ISP needed to do the reverse DNS on their nameservers upon request; there should be also a reverse DNS file on our own DNS servers - do you think that they interfere ?).