IIS FTP Server - One d-link router, 2 machines each w/ftp site

This is Interesting: Free IT Magazines  
Home > Archive > IIS FTP Server > February 2004 > One d-link router, 2 machines each w/ftp site





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author One d-link router, 2 machines each w/ftp site
Monte Grant

2004-02-11, 2:36 pm

Can this be done? I'm a bit new at this. I have opened ports 21/20 for
active ftp site on one XP machine. I have a networked (d-link) 2k pro
machine that I need to run a separate ftp on.

Since I'm not running server, I get only one ftp per os. Are there port
options with ftp? Any way I might be able to get both sites to work through
one router?

I assume I can't specify ports the way its done with http? ftp://
n.n.n.n:21


Bernard

2004-02-11, 3:36 pm

Don't quite get you. 'port options' ? you use virtual directory instead of
many ftp sites. And IIS5.1 only support one active ftp site at any time.

before you try anything on remote host, test locally first.
a) ftp.exe localhost, then test
b) ftp://localhost:xx/, with IE

if both working then try remote testing.
port 21/20 used by active mode, for passive mode you
need different range. refer this kb.
Information About the IIS File Transmission Protocol (FTP) Service
http://support.microsoft.com/?id=283679

for W2kSP4 and Win2003, you can customize the passiveportrange,
then unblock it at your router, for XP, I don't think you have this option.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...


"Monte Grant" <dir@attbi.com> wrote in message
news:eoDrHzR8DHA.1636@TK2MSFTNGP12.phx.gbl...
> Can this be done? I'm a bit new at this. I have opened ports 21/20 for
> active ftp site on one XP machine. I have a networked (d-link) 2k pro
> machine that I need to run a separate ftp on.
>
> Since I'm not running server, I get only one ftp per os. Are there port
> options with ftp? Any way I might be able to get both sites to work

through
> one router?
>
> I assume I can't specify ports the way its done with http? ftp://
> n.n.n.n:21
>
>



Jeff Cochran

2004-02-12, 12:34 am

On Wed, 11 Feb 2004 22:06:45 -0600, "Monte Grant" <dir@attbi.com>
wrote:

>Can this be done? I'm a bit new at this. I have opened ports 21/20 for
>active ftp site on one XP machine. I have a networked (d-link) 2k pro
>machine that I need to run a separate ftp on.
>
>Since I'm not running server, I get only one ftp per os. Are there port
>options with ftp? Any way I might be able to get both sites to work through
>one router?
>
>I assume I can't specify ports the way its done with http? ftp://
>n.n.n.n:21


First, yes you can use different ports in FTP. Your router will need
to port forward to two separate systems for the ports, but that's a
router issue, not an FTP one. Third party FTP products will allow
multiple sites and multiple IP addresses, though again, your router
will need to be configured correctly.

Jeff
Monte Grant

2004-02-12, 2:36 am

I understand how to forward. I just can't get the ftp port specification to
work. I tried port 200 but cannot connect.

On the other machine I use the default 21. I read that both 20 and 21
should both be reserved. Does it matter how many ports I open and what they
are?


"Monte Grant" <dir@attbi.com> wrote in message
news:eoDrHzR8DHA.1636@TK2MSFTNGP12.phx.gbl...
> Can this be done? I'm a bit new at this. I have opened ports 21/20 for
> active ftp site on one XP machine. I have a networked (d-link) 2k pro
> machine that I need to run a separate ftp on.
>
> Since I'm not running server, I get only one ftp per os. Are there port
> options with ftp? Any way I might be able to get both sites to work

through
> one router?
>
> I assume I can't specify ports the way its done with http? ftp://
> n.n.n.n:21
>
>



Jeff Cochran

2004-02-12, 7:36 am

On Thu, 12 Feb 2004 09:40:08 -0600, "Monte Grant" <dir@attbi.com>
wrote:

>I understand how to forward. I just can't get the ftp port specification to
>work. I tried port 200 but cannot connect.


Are you trying from Internet Explorer or a command line? And what
does "cannot connect" mean? Passive mode enabled?

>On the other machine I use the default 21. I read that both 20 and 21
>should both be reserved. Does it matter how many ports I open and what they
>are?


FTP needs port 20 and 21, plus a random port above 1024 once the
connection is established. But it should work fine configured for
other ports as well, provided the client provides the port on the OPEN
command.

Jeff

>"Monte Grant" <dir@attbi.com> wrote in message
>news:eoDrHzR8DHA.1636@TK2MSFTNGP12.phx.gbl...
>through
>


Monte Grant

2004-02-12, 8:37 am

Well it seems to be working now, but unlike the xp site, I cannot get the
account to be able to write, though "write" is checked in properties for the
default ftp site. The account on the 2k machine is set up as a User

I also just discovered that the account used to access the xp machine is a
member of Users and Administrators. So anyone with the Visitor account who
can get passed the firewall is into the system.

If I can ask, what security settings will allow ftp visitors to write files
and create directories, while providing maximum security?



"Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message
news:4034dde9.84877627@msnews.microsoft.com...
> On Thu, 12 Feb 2004 09:40:08 -0600, "Monte Grant" <dir@attbi.com>
> wrote:
>
to[color=blue]
>
> Are you trying from Internet Explorer or a command line? And what
> does "cannot connect" mean? Passive mode enabled?
>
they[color=blue]
>
> FTP needs port 20 and 21, plus a random port above 1024 once the
> connection is established. But it should work fine configured for
> other ports as well, provided the client provides the port on the OPEN
> command.
>
> Jeff
>
for[color=blue]
port[color=blue]
>



Bernard

2004-02-12, 8:34 pm

You can try -
HOW TO: Limit FTP Access in Windows 2000
http://support.microsoft.com/?id=318712
HOW TO: Create a Secure FTP Directory that Uses Password Authentication
http://support.microsoft.com/?id=239120

this apply to XP as well, and configure NTFS to secure your contents

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...


"Monte Grant" <dir@attbi.com> wrote in message
news:OBvkS3a8DHA.2656@TK2MSFTNGP11.phx.gbl...
> Well it seems to be working now, but unlike the xp site, I cannot get the
> account to be able to write, though "write" is checked in properties for

the
> default ftp site. The account on the 2k machine is set up as a User
>
> I also just discovered that the account used to access the xp machine is a
> member of Users and Administrators. So anyone with the Visitor account

who
> can get passed the firewall is into the system.
>
> If I can ask, what security settings will allow ftp visitors to write

files
> and create directories, while providing maximum security?
>
>
>
> "Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message
> news:4034dde9.84877627@msnews.microsoft.com...
specification[color=blue]
> to
> they
> for
pro[color=blue]
> port
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com