2 router port forwarding

[Underage_Thinker]

Ok well I just recently figured out a way to host a ftp server on my computer. Now in order for me to do this i need to open port 21. Now the way i use to have my internet set up i was behind just one router. The problem is that i just recently reconfigured my set up so now i am behind two different models of routers, the way i have it set up it goes phone line coming out of wall then modem then Ethernet cable going into my first router, then one of the cables coming out of that router goes into my second router then coming out of that router it goes to my computer. Now The way i had it done is that i would have the first router forward port 21 to the second router then the second router forward it to my computer. but for some reason i am still unable to access my ftp server via the web. I know it is working because i am able to access it via "ftp://[ip of my computer on the network]" So if anybody knows what i am doing wrong i would greatly appreciate some help.

[Blahages]

Ok well I just recently figured out a way to host a ftp server on my computer. Now in order for me to do this i need to open port 21. Now the way i use to have my internet set up i was behind just one router. The problem is that i just recently reconfigured my set up so now i am behind two different models of routers, the way i have it set up it goes phone line coming out of wall then modem then Ethernet cable going into my first router, then one of the cables coming out of that router goes into my second router then coming out of that router it goes to my computer. Now The way i had it done is that i would have the first router forward port 21 to the second router then the second router forward it to my computer. but for some reason i am still unable to access my ftp server via the web. I know it is working because i am able to access it via "ftp://[ip of my computer on the network]" So if anybody knows what i am doing wrong i would greatly appreciate some help.

I had to draw out a diagram to understand what you were talking about. :-)

Basically, Tell me If I'm right (Yes, It's kind of Rigged looking, but It should get the point Across):

http://i19.photobucket.com/albums/b191/blahages/NetworkMap.jpg

I see you have Port 21 Configured on Router 1 to Forward to Router 2. Then, You have Port 21 Configured to Forward from Router 2 to the Server.

Do you have your Modem configured to Forward Port 21 to Router 1? With my Router, I just configured it to use my Router as the DMZ server through the DSL Modem to Forward Everything to Router 1, then Router 1 Handles Port Forwarding.

Assuming:
Modem Address: 192.168.0.1
Router 1 Address: 192.168.1.1
Router 2 Address: 192.168.2.1
Server Address: 192.168.2.101

AND Assuming you have your Modem Plugged into the WAN port on Router 1, and Router 1 Plugged into the WAN port on Router 2.

It should go:



Configuration For Modem: 192.168.0.1:
Forward Port Start Port 21 to End Port 21 to Address 192.168.1.1

Configuration For Router 1: 192.168.1.1:
Forward Port Start Port 21 to End Port 21 to Address 192.168.2.1

Configuration For Router 2: 192.168.2.1:
Forward Port Start Port 21 to End Port 21 to Address 192.168.2.101
Were you able to access your FTP Server from the Web Before, when you were using Just one Router? Or hadn't you set it at the time?

[Kiros]

Nice post, Will! :)

Oh, Forrest, if both of your routers have the option, try configuring your first router to have a DMZ host (being the second router), and the second router having one too (being your computer).

I know that it might not be required by some FTP servers, but have you tried including the port number in your FTP call, such as ftp://[server]:21/ ?

Also, there might be some kind of configuration you need to properly set in one or both of the modems (could be firewall, restrictions, or general networking options).

If all else fails, you might want to try reading up on the router manuals/help resources and learn as much about any software you're using to make the FTP server.

[Blahages]

Oh, Forrest, if both of your routers have the option, try configuring your first router to have a DMZ host (being the second router), and the second router having one too (being your computer).

Only do this if you don't have any other computers on your network that you have intentions of Hosting anything on. :-)

Like, if you only have one Device connected to the Modem (Router 1) then DMZ for the Modem is Fine. If you only have one Device connected to Router 1, DMZ is fine for Router 1. But, if you have 2 Devices on Router 1 that you want to host something on, Say RDP (Remote Desktop) on Computer A and HTTP on Computer B, don't set up DMZ on Router 1.

Otherwise, Setting up DMZ will make it easier.

Also, there might be some kind of configuration you need to properly set in one or both of the modems (could be firewall, restrictions, or general networking options).

Here's a fairly large listing Howto set up Port forwarding for Specific Services on a large list of Routers.

http://portforward.com/english/routers/port_forwarding/routerindex.htm

Which, Sometimes shows you other changes you might need to make, such as Firewall Changes. Although, it just depends on if your routers are listed, and your exact configuration.

I don't believe it's necessary, but Port 20 (FTP Data Port) MIGHT also be needed. I'm pretty sure you don't need to forward this port, but I'm not positive. Most Configs on Routers only tell you to forward port 21 for FTP, so it might not need to be forwarded in order for FTP to work correctly.

So, if all else fails, try forwarding this port as well. Although, if it's not needed, it'll just add another security vulnerability having that port set up on your router/server.

EDIT: Also, if you don't have any specific reason for using both Routers as DHCP Servers, you could disable Take router 2 and disable DHCP and have it run passively and just bridge the two connections together. So, basically, what you'd have, is Router 1 controlling EVERYTHING plugged into Router 2, so you'd completely bypass any need to configure router 2. You'd have to have Router 1 connected from a LAN port on Router 1 to a LAN port on router 2, instead of into the WAN port on Router 2.

Depending on what you have, you might need a Crossover cable for that to work though.

But don't use that unless all else fails. I used that set up a little while back when I was running more then one router. There's not much of a point in running two-three seperate DHCP Servers hosting IP addresses if it's not needed. It'll just cause more problems. Besides, you won't be able to access a computer very easily that is on a different router then your computer as you normally would, since everything's going through the WAN port. Cutting one factor out of the Equation just simplifies the entire thing, causing less headaches.