Hi all

I have BeThere broadband with a static IP. I have a Netgear DG834N. I have enabled DMZ for my computer LAN IP. This should mean I can now access my FTP site with the following:

ftp://87.194.152.216

But of course it doesnt work. http://xx.xx.xx.xx doesnt work either. I have tried entering a static route (which sounds like it should work) from WAN IP to gateway of my LAN IP.

So my Question is whats stopping it?

And BTW if you do get onto my FTP please tell me! All I want to do is share files with the world pretty much instead of using crappy limited online storage (I have 1Mb upload).

Thanks for any reply in advance

Kyle

You would need to assign a NIC on your FTP to that IP address which you listed. I'm guessing you're using an internal public IP address range of 10.1.2.x?

You're risky in what you're trying to do unless you have proper security setup: Double firewall in this case.

Anyhow, I can't ping the IP address you have there, meaning you either block WAN Requests via a router or firewall, or the IP address isn't statically set to one of your PCs.

Either you set the PC to that static IP address which you have purchased from your ISP. If you used a name instead of IP, you would have to have your ISP add that information into DNS for correct routing.

I would recommend keeping this PC strictly on the public outside though, no internal IP address range. When I did a trace route, it started pulling back private based IP addresses.. if that is in fact your private subnet, you have a huge secuirty problem on your hands.

I am not on an internal address range of 10.1.2.x

You cant ping the IP because I have blocked that from the WAN port.

How would I set the public IP to my PC rather than router?? My previous belkin router could do this.

I dont know what private based IP adresses you are getting maybe you are confusing 197.x.x.x with 192.x.x.x or your own IPs??

Thanks for the reply, any more help would be much appreciated.

Find the internal network ip address of the ftp computer. Forward ports 20 and 21 to that ip address. Any FTP traffic will now be directed to the FTP computer. The rest of the computers will not receive ftp traffic from outside your network. Infact you might block ftp access into all other computers.

Sorry - I was thinking about this from a company side, not home based.

In a company, we'll put an FTP server behind 1 firewall but have another firewall to block the FTP server from the internal network. The FTP server would have a statically set IP address instead of letting the router handle the forwarding requests.

As Sturm stated, you'll most likely want to set a static IP address of 192.168.x.x on the FTP server and on your router, forward port 20/21 (ftp protocol) to the static 192.168.x.x FTP computer.

Reason for making the IP static is that if the IP changes, mainly if computers are powered on in a different order, the static IP has a good chance of changing on you.

On your other computers you may want to disable the FTP service and only use your FTP server for that workload, or on your router block those ports from other internal IP addresses.

I am in DMZ so port forwarding shouldnt be a problem.

I have netgear invovled now and I will tell you if they solve my problem...

So far they have told me to enter DNS servers of 4.2.2.2 and 4.2.2.1

Didnt work.

You have to forward the ports. Right now your IP address is that of the router. The router doesn't know where to send the FTP request.

Forward the ports and you will be fixed. The DMZ puts the computer outside of the 'firewall' which is bad for you since its exposed now. You want to forward the ports and that will fix your problem.

So how would I do this, there doesnt seem to be an option on this router.

you need to create a host computer and a server or there are many free host that will redirect traffic to your address. Once you have the host and server running you can redirect traffic to your computer using your external IP or ftp folder and your ftp properties setup to the host information
http://www.microsoft.com/technet/p [...] x?mfr=true
in your case the host is the ftp,http ext.....or get filezilla