Passive FTP problem

["Nathan Simpson" <nathan@xxxxxxxxxx>]

Hi,

We are trying to FTP out of our V4R5 AS/400 through a Cisco 3002 
Concentrator, out through a PIX to the Internet and then onto the remote 
site.

We have a LIND with multiple interfaces created.

192.168.10.9 for AS/400 SMTP
192.168.10.11 for everything else including Domino
192.168.1.10 for the FTP traffic to leave on and go to the 3002.

192.168.10.11
192.168.10.9
192.168.1.10    -> 192.168.1.1 |CISCO  3002| 192.168.10.8     -> 
192.168.10.253 | PIX|   -> Internet

This is out routing table on the AS/400:
 *DFTROUTE        *NONE            192.168.10.253   *NONE 
 10.0.0.0         255.0.0.0        192.168.10.254   *NONE 
 10.12.6.0        255.255.255.0    192.168.10.254   *NONE 
 137.1.0.0        255.255.0.0      192.168.10.254   *NONE 
 172.xx.x.x       *HOST            192.168.1.1      192.168.1.10 
 192.168.11.0     255.255.255.0    192.168.10.254   *NONE 
 192.168.20.0     255.255.255.0    192.168.10.254   *NONE 
 192.168.21.0     255.255.255.0    192.168.10.254   *NONE 
 192.168.22.0     255.255.255.0    192.168.10.254   *NONE        

We have opened up the port on the PIX and we can log in ok. but when we 
try to transfer it fails with:
227    Passive mode entered (172.xx,x,x,38,147) for client IP Address 
"172.yy.yy.y".
Unable to setup for an active data connection to the server, reason code 
5. 
200    Using port 8338 at host 192.168.1.10

We have tried this on a PC client and it works fine, so that is why I 
think it maybe the AS/400 FTP client.

I have also tried with FTPPLUS (another ftp client for AS/400) and it also 
fails with the same message.

The remote system has to use PASSIVE connection and that is what we are 
trying to force on the AS/400.

Anyone have any ideas?

TIA

Regards,

Nathan Simpson
Australian Wool Handlers
Forest Rd
Lara VIC  3212
Ph. (03) 5272 9227
Fax (03) 5274 2084

This message and any attachments are confidential and may be subject to
legal  or other professional privilege.  Any confidential or privilege is
not waived or lost because this e-mail has been sent to you by mistake. If
you have received this transmission in error, please notify us by reply
e-mail,  or phone +613 5272 9227 and delete our e-mail.