Differences

This shows you the differences between the selected revisions of the page.

2015-01-26 2015-08-14
corrections (martin) at least on windows 8.1 and 10 we have seen the firewall rules to be disabled initially (martin)
Line 83: Line 83:
&screenshotpict(iis_certificates) &screenshotpict(iis_certificates)
-===== [[firewall]] Servers behind Firewall/NAT =====+===== [[firewall]] Servers behind external Firewall/NAT =====
-If your server is behind a firewall/NAT, you need to tell the FTP server its external IP address, to allow passive mode connections.+If your server is behind a external firewall/NAT, you need to tell the FTP server its external IP address, to allow passive mode connections.
  * In //%%IIS%% Manager//, open //%%FTP%% > %%FTP%% Firewall Support//.   * In //%%IIS%% Manager//, open //%%FTP%% > %%FTP%% Firewall Support//.
Line 98: Line 98:
Some external firewalls are able to monitor %%FTP%% control connection and automatically open and close the data connection ports as needed. So you do not need to have whole port range opened all the time, even when not in use. This won't work with the secure FTPS as the control connection is encrypted and the firewall cannot monitor it. Some external firewalls are able to monitor %%FTP%% control connection and automatically open and close the data connection ports as needed. So you do not need to have whole port range opened all the time, even when not in use. This won't work with the secure FTPS as the control connection is encrypted and the firewall cannot monitor it.
-An internal Windows firewall is automatically configured to open ports 21, 990 and 1024-65535 when %%IIS%% %%FTP%% server is installed. Should you want to verify or change this, go to //Control Panel > System and Security > Windows Firewall > Advanced Settings > Inbound Rules// and locate three "%%FTP%% server" rules. &wincp+===== Windows Firewall Rules ===== 
 + 
 +An internal Windows firewall is automatically configured with rules for the 21, 990 and 1024-65535, when %%IIS%% %%FTP%% server is installed. 
 + 
 +On some system these rules come disabled initially though. To enable or change the rules, go to //Control Panel > System and Security > Windows Firewall > Advanced Settings > Inbound Rules// and locate three "%%FTP%% server" rules. &wincp If the rules are not enabled, click on //Actions > Enable Rule//.
===== [[restart]] Restarting FTP Service ===== ===== [[restart]] Restarting FTP Service =====

Last modified: by martin