Windows 2003 SP2 Firewall issue with FTP Port 21

[dowNNshift]

After much of testing and troubleshooting of Plesk 8.2 prior to our latest server deployment, we finally discovered a solution to a persistent Windows Server 2003 Web Edition SP2 FTP Port 21 firewall issue.

The problem; Whenever the main firewall was activated within the Plesk control panel (thus activating the full Windows Firewall SP2), all attempts to connect via FTP port 21 were dropped and unable to connect. With the firewall off, connections via FTP port 21 work fine -- verifying that it was a Windows Firewall blocking conflict. Notably all other opened ports (DNS, HTTP, HTTPS, SMTP, POP, etc) worked correctly with Windows Firewall on or off.

We verified that a rule allowing port 21 connections was allowed in both Windows Firewall and in the Plesk Control Panel >> Server >> IP Addresses >> Firewall >> Local Area Connection.

Our solution; We discovered that the installer had created a Windows Firewall conflict by adding a FTP exception rule in the Windows Firewall >> Local Area Connection >> Advanced Tab. We unchecked all FTP rules where found, and then created a simple exception in the Windows Firewall >> Exceptions Tab.

We added a new exception titled, Plesk FTP (Port 21), and then the TCP port 21.
Now we can connect via Active FTP through the Windows Firewall.

Will the SWSoft software engineers please look into correcting this Windows Firewall conflict in future revisions, and/or issue a knowledge base bulletin.

 

[sergius]

Hello dowNNshift,

Thank you for the report. We will consider your suggestion.

 

[72ppi]

Same error ..

When can we expect a solution for this matter??? We have the same problem and have no problems making an exception for the FTP service, but still no passive connections are allowed to the server.
As of now, we're forced to run the server with a disabled FW, so we don't experience the load on the phones with support issues for ppl, that cannot figure out how to use their services .. :-(

We're running this explicit server with W2K3 Server Std. Ed. and Gene6 FTP Server 3.9.

Please advice!

 

[JackL]

Did you try this http://support.microsoft.com/?id=555022 ?
John S.G.

 

[72ppi]

Haven't tried that one yet. Seems like a solution and then open for that specific route afterwards .. I'll keep you posted tommorrow about the progress ..

 

[sergius]

Plesk 8.3 does provide feature Firewall ports ranges for passive FTP.
For more details see http://download1.swsoft.com/Plesk/Plesk8.3/Doc/en-US//plesk-8.3-win-administrators-guide/52601.htm

 

[hansenc]

Plesk 8.3 does provide feature Firewall ports ranges for passive FTP.
For more details see http://download1.swsoft.com/Plesk/Plesk8.3/Doc/en-US//plesk-8.3-win-administrators-guide/52601.htm

Does this also open the firewall ports or JUST set passive mode port range on the FTP Part. I know before we have had to do both. (i.e. Manually open up each port and also manually set the port range in the MS FTP)

 

[Bender]

Hi,

Plesk configure both ftp and firewall.

 

[sergius]

Please look at http://kb.swsoft.com/en/1458

 

[cuongc]

This is ur resolution if u r using Plesk 9

This is ur resolution if u r using Plesk 9

1. Go Home>Settings>FTP Settings
Set port 5001 for passive FTP, then OK

2. Open Windows firewall >> Choose Exceptions

Add port 5001 then OK
3. Restart Windows firewall.

Thats it. Enjoyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy

 

[WFiskum]

Windows FTP Firewall Problem Resolution

In order to allow the Windows Server to act as an FTP server, there are actually two things that need to occur on the firewall settings:
1) With the Firewall on, click on the Exceptions tab and then click "Add Port" name the port FTP and put 20 in the port number. Then click "Ok". Click "Add Port" again and name the second exception FTP2 and put 21 in the port number, then click "Ok".
2) Windows Firewall will still not allow FTP connections until you do this: On the Advanced tab of Windows Firewall, in the "Network Settings" box, click on "Local Area Connection" then the Settings button. On the Services tab, check the box next to "FTP Server" and click "Ok", then "Ok" again to exit Windows Firewall and Viola, the Windows server will allow FTP connections.