« Previous Next »

Thread: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

Last post 04-07-2009 5:13 AM by qbernard. 12 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (13 items)

Sort Posts:

  • 03-31-2009, 1:38 AM

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

     Ey fellas, I am running a machine that is using Windows Server 2003 and am wondering if there is any possible way to specify what ports the server uses in passive mode. I am using FileZilla as the FTP client and Active mode is not working and Passive mode tends to be the preferred method in any case. Everything is working fine but the server addresses the wrong ports, I have set my ports to 51101-51201 and the server tries using ports out of this range and I can't figure out how to tell it to use a designated range. Any help would be much appreciated, thanks in advance!

  • 03-31-2009, 3:29 AM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Since The server is issuing a different port range than the ones I have opened on the firewall, I disabled the firewall and everything works as it should. I can try tackling the task from a different approach and open the ports on the firewall that the server is curently using... these ports are in the early 1000's range, anyone have any idea of what range I should specify to make it work smoothly without any hiccups? Will it use ports all the way up to the highest port number(65000ish)?Thanks.

  • 03-31-2009, 4:02 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Hi,

    To configure the ports you specified in IIS 6.0 you would issue the following command :

    cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET /MSFTPSVC/PassivePortRange "51101-51201"

    Regards,

     

    Paul Lynch | www.iisadmin.co.uk
  • 03-31-2009, 4:57 AM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Ey Paul, thanks for the response. I have done that before and even opened those ports on the firewall by following this guide:

    http://www.newagedigital.com/cgi-bin/newagedigital/articles/ms-firewall-ftp.html

    But for some reason it still refuses to work... Am I missing something?

  • 03-31-2009, 5:03 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    what do you mean refuse to work? have you check if the server is indeed using port within the range or ?

    this kb shows your how to calculate
    http://support.microsoft.com/?id=281193

    Cheers,
    Bernard Cheah
  • 03-31-2009, 5:08 AM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

     Yeah, it is outside the range. This is what its giving me:

     Response:    227 Entering Passive Mode (***,**,***,**,6,63) which is port 1599, definitely under what I have specified. It seems that it is still using the default range, whatever that may be.

  • 03-31-2009, 5:13 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Meaning your configure is not valid or somehow didn't make it in.

    Read again
    How To Configure PassivePortRange In IIS
    http://support.microsoft.com/?id=555022

    restart ftp service after you configured it.

    Cheers,
    Bernard Cheah
  • 03-31-2009, 5:28 AM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

     You sir are a GENIUS! Is there any way to restart the FTP service besides restarting the machine? I am accessing the server remotely and did not think of restartng the machine until you mentioned it and it works! Thank you so much!

    Now that I have basic FTP up and running I have a couple of questions... Do you recommend using Windows' ISS for the FTP or should I install FileZilla Server and go from there? The next thing I want to do is enable FTPS at the very least(SFTP would be nice) any direction you could point me in or links you could provide? Thanks again! I can't believe I was so stupid to overlook restarting the machine...

  • 03-31-2009, 6:15 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Hi,

    You didn't need to re-start the machine, just the FTP service. To do this you could run 'net stop msftpsvc' followed by 'net start msftpsvc' from the command prompt.

    FYI, the IIS 6.0 FTP service doesn't support FTPS or SFTP. The FTP 7.5 service for Windows 2008 does support FTPS and it works very well.

    If you want to use SFTP you will need a 3rd party product as Microsoft don't currently offer an SFTP product.

    Regards,

    Paul Lynch | www.iisadmin.co.uk
  • 03-31-2009, 6:25 AM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

     I see... but if I wanted to try to go ahead with FTPS in any case, would it be possible to do it using FileZilla on Windows Server 2003? Unfortunately the machine I am running 2003 on isnt powerful enough for 2008 so that is not an option and I realy want to secure the FTP service somehow. Do you have any recommendations for me to go about getting at least an FTPS connection on the Windows 2003 OS? I do not have to use MS's IIS 6.0, I am wiling to use third party applications but just want them to run on Windows Server 2003. If you recommend another server OS feel free to let me know, and maybe down the line I will consider changing. Thanks!

  • 04-01-2009, 8:58 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Hi,

    From what I can see (I'm not 100% sure as I've never actually used it) Filezilla Server only supports FTPS not SFTP.

    However, I'd avoid using SFTP if you can as it can be fiddly to set up and a pain to manage and maintain - I know because I *do* use it unfortunately.

    My suggestion would be to bite the bullet and upgrade to Windows 2008 so that you can use FTP 7.5

    Regards,

    Paul Lynch | www.iisadmin.co.uk
  • 04-01-2009, 3:59 PM In reply to

    • Stunner
    • Not Ranked
    • Joined on 03-31-2009, 5:29 AM
    • Posts 7

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

     Thanks for the response. I ended up setting up FTPS for the time being via FileZilla Server on Windows Server 2003. Until I can get a new machine I am going to use the current setup. Thanks for your insight.

  • 04-07-2009, 5:13 AM In reply to

    Re: Possible to Designate Port Range on Windows Server 2003 FTP for Passive Mode?

    Oopss. sorry was on the road.. For my case - I uses IIS 6.0 FTP only, security is done via VPN :)
    Cheers,
    Bernard Cheah
Page 1 of 1 (13 items)