FTP and firewall

[Gustavo Perez]

hi friends...

 

i installed FTP 7.5 over IIS 7.0. How i have to configure firewall to let access to my clients? i already tried opening port 21 or even another ports, but it only works when firewall is disconnected.

 

Thanks.

Regards.

[F2 Staff]

The firewall rule should automatically be added when you turn on the service. It sounds like this could be a problem with the upgrade to 7.5.

 

Have you tried uninstalling the service and reinstalling it?

[Gustavo Perez]

thanks BSchwarz......I have unistalled FTP 7.5 and i tried with FTP over IIS6 but i get the same problem. it seems automatic rule is not created. the thing is i can get access from MSDOS, but i cannot get access from iexplore or windows explorer. Everything work when i disable firewall. i dont know what im missing, i dont rmember to get this problem on Windows 2003. any help would be appreciated.

 

Regards

[F2 Staff]

Have you checked and made sure you allow both TCP and UDP inbound and outbound connections on port 21?

 

I don't run FTP on my servers so to test out what happens when it's installed I activated the FTP roll and setup FTP for one website. I can connect without making any changes to my firewall rules. I then changed configuration to use SSH and was still able to login.

 

The only thing I can see causing the problem is the firewall rules since it works with the firewall off.

[Gustavo Perez]

Yes, i allowed both tpc and udp in ports 20 and 21, because i read port 20 is also used, but still no work. Yes, im sure my problems is with firewall since everything work right when it is disabled and this is making me crazy. how i said i can get access in MSDOS console, so i assume port 20 and 21 are working right. my dude is whether i have to open a diferent port to get access from iexplore or windows explore.

 

i have ftp sites wokring right in 2003 and i didnt change anthing in firewall. dont know why 2008 is so difficult :) In any case, thanks for your help Bob, i will go on trying and if i get success i will let you

 

Thank again man

Regards

[koga73]

If you are using FTP with port forwarding / network address translation then you need to set your FTP firewall support settings in IIS. When accessing FTP via passive mode the server responds with a port and ip address for the client to connect to. You need to set the data port range and the ip to your public static ip. You also need to open your firewall to the data port range. This should fix your problems.

[Gustavo Perez]

thanks Koga.....the thing is i already tried everything. i also tried to open a ports range, i tried to active and passive mode and i get the same problem in both modes.....but when i turn off the server firewall everything works right. Thinking about ports, i have proved i can get access from ms-dos console, but i cannot from iexplore or windows explore. i go on trying, but i cannont find the success rule :)

 

regards

[koga73]

I have my data range set to 5000-5100 and have an inbound firewall rule that requires a secure connection for TCP local and remote ports 5000-5100. Besides that I have the windows default firewall rules that are created when you install the FTP service.