Search results matching tag 'FTPS'

setting up ftps on IIS 7.5 using Explicit/passive modes

icnventures — Thu, 22 Oct 2009 14:56:40 GMT

I am trying to set up an ftps server using IIS 7.5 so a vendor can post large files to our servers. I have installed everything and it seems to be working for my point of view. I have installed coreftp and filezilla on my PC and I am able to login and transfer files. However when my vendor logs in they are having some issues that I can figure out. Windows firewall is turned off and the public firewall is doing a port forward. I am going to post his email.

I first did a test to replicate your symptoms. It timed out after five minutes. I increased the time out value to ten minutes (600 seconds). I got a response from that server after three minutes which reset the timer but it timed out after ten minutes. Then I looked closer at the server messages. Their PASV message contains their public IP address (x.x.x.x) and the port is in the range they specify (49152-65535). Everything is fine so far.

However, the server message received to both a Passive and Active mode is the same. We should be getting an immediate reply code (125) stating the listing has started.

I did a packet trace which shows the mainframe sends out the data channel connection attempt (SYN packet) six times but never gets a response (SYN ACK packet) before it times out.

I do not know if their firewall is blocking the data channel connection attempt or their server isn’t responding or if its response is not making it back through their firewall. With the 150 message indicating it is trying to connect to us as if this were Active mode, the server may not be operating properly.

Set timer value to ten minutes (default is five)

ftp -x –r tls url.url.com (ti 600

get logged in fine and data channel is set to secure. Do ls (list) which works the same as a GET

locsite FWF  set Passive mode
EZA1460I Command:
ls
EZA1701I >>> PASV
227 Entering Passive Mode (x,x,x,x,194,218).  Public IP x.x.x.x and port 194x256+218=49882
EZA1701I >>> NLST
150 Opening ASCII mode data connection.  received after three minutes which resets timer. BUT.. see Active mode below

*** 10 minutes pass ***

EZA2589E Connection to server interrupted or timed out. Waiting for reply
EZA1721W Server not responding, closing connection.
EZA1460I Command:

However, when I use Active mode

ls
EZA1701I >>> PORT 166,37,192,3,168,200
200 PORT command successful.
EZA1701s >>> NLST
150 Opening ASCII mode data connection  same server message
EZA2589E Connection to server interrupted or timed out. Waiting for data connection
550
EZA1460I Command:
quit
EZA1701I >>> QUIT
221 Goodbye.
READY

Secure Passive FTP connection from OZZ2 to OPS1:

ls
EZA1701I >>> PASV
227 Entering Passive Mode (166,37,128,66,10,109)
EZA1701I >>> NLST
125 List started OK  should be getting something like this back
EZA2284I BRODCAST.LIST
EZA2284I FTP.ROLL.OBEY1
EZA2284I FTP.TEST.BATCH
EZA2284I FTP.TEST.FIFTY

SSL Server Service.

JawzDK — Sat, 17 Oct 2009 09:58:31 GMT

Greetings.

Im setting up an IIS 7.5 FTP server, my users is having problems connecting to the server with SSL (FTPS). Some say the problem is:

"Make sure the server service is allowed to access the certificate and key files."

Anyone know how that is possible?

Thanks!

FTP7 425 error on PASV mode

Sader82 — Tue, 26 May 2009 08:16:09 GMT

Hi all,

I have problems connecting FTP7 with passive mode. I used the url:

http://blogs.iis.net/jaroslad/archive/2007/09/29/windows-firewall-setup-for-microsoft-ftp-publishing-service-for-iis-7-0.aspx

But I still not getting connected with the passive mode. anybody Ideas?

Data Channel Port Range Grayed Out?

kgolding — Thu, 16 Apr 2009 22:54:34 GMT

I just installed the new 7.g ftp services and I have been struggling with firewall rules, as I need to configure an external firewall to allow the data ports, however, the Data Channel Port Range box is grayed out, so I cannot configure what ports is should use, and I have no idea what ports may be configured by default.

I have tried setting the external IP, but that did not help in either passive or active mode.
There is a warning message in the upper left of the IIS Manager that says: “To accept passive connections when you are using FTP over SSL (FTPS) or when your firewall does not filter packets, configure the external IPv4 address of your firewall.” , which I think is suggesting that I add firewall allow rules for the Data Channel Port Range of [0-0]…?

Also, when I add an external IP address of the firewall, I get a dialogue saying “Please configure your firewall to allow FTP access for both the control channel and data channel port range”. Which I would just love to do, but I cannot find a place that says what the control channel is, and the interface will not allow me to change the Data Channel Port Range from 0.

Anyway, this is a Windows 2008 x64 machine sitting behind a pix firewall. The local Windows 2008 firewall is currently off, as I did not want it in my problem space.

Anyway, I am definitely confused?.

FTPS crashes ftp service on IIS 7

270net — Wed, 19 Nov 2008 22:17:02 GMT

I am using IIS 7 on Windows Server 2008, with the out of band installation of FTP 7 installed. Through much struggle and headaches, I believe to be on the brink of actually getting FTPS working (not nearly as easy as the walkthroughs I've seen make it). The most aggravating part about attempting to get Passive FTPS to work is that our public facing server is using the integrated Windows Firewall w/ Advanced Security feature, so the Incoming Ports rules must be made here. The big issue there is that the interface does not allow you to put in a port range....it only allows specific ports comma seperated.....which means I'll have a long line of 1000 high end ports for my data channels to put into the rule (lame). Is there an easier way to do this?

Regardless of these highly aggravating issues, the one that is killing me is that ever since I enabled FTPS functionality, the FTP service continues to crash. The only clue is the Event log saying "The FTP service has terminated unexpectedly. This has happen n times." The service is set to autorestart after fails, too.

If anyone has any insight on why this may be happening, or is reasonably comfortable with their institution of FTPS, any help would be much appreciated.

-Mike

Re: IIS7 FTP setup

unre4l — Sat, 11 Oct 2008 07:16:35 GMT

I ran into another problem and am hoping someone can point me in the right direction

I had setup quotas on this server but the quota report does not show me per user usage and rather everything is under the administrator account. I am guessing I will have to setup VDs for each user to get the quotas right. Does anyone have any sample scripts to setup create/delete VD's for a user from the command line for ftp7?

Re: FTP site in IIS7 on Windows 2008

julian6709 — Sat, 27 Sep 2008 02:33:34 GMT

I had figured it out, the "directory tree options" -> "disable directory tree detection" in the FTPS client need to be disabled.

Thx,
Julian

Re: IIS7 + FTP7, FTP stopped working, server reboot solved the problem, any clues?

robmcm — Thu, 21 Aug 2008 05:10:51 GMT

That is a known issue that was resolved in the following rollup hotfix:

http://support.microsoft.com/kb/955136

Re: FTP 7 and data channel protection (PROT)

robmcm — Fri, 08 Aug 2008 21:25:40 GMT

I think the problem that you are seeing is due to the SSL settings, which are set to "Require SSL" by default. If you change your settings to "Allow SSL", then you can drop out of SSL. What's more, if you open the FTP SSL Settings feature and choose "Custom", then you can specify separate settings for the data channel and control channel.

Re: FTP over SSL command prompt?

peaceable_whale — Sun, 15 Jun 2008 13:47:12 GMT

Does FTP 7 RTM contain the FTPS command tool?

The tool was mentioned in the video at http://channel9.msdn.com/shows/IIS+Show/An-Overview-of-FTP-7-with-Robert-McMurray/ (16'01")