Newest KB Articles in FTP Manager

How to configure MS-FTP with windows firewall?

Tue, 05 Oct 2010 06:18:33 GMT

Question: How to configure MS-FTP with Windows firewall?

Answer:

Create a Default FTP site in the IIS Web Server with the help of this Article

Step 1: Configure the Passive Port Range for the FTP Service

In this section, configure the server-level port range for passive connections to the FTP service. Use the following steps:&

Go to IIS Manager. In the Connections pane, click the server-level node in the tree.

1. Double-click the FTP Firewall Support icon in the list of features.

Double-click the FTP Firewall Support icon in the list of features.

Enter a range of values for the Data Channel Port Range 49152-65535

Once the Port range for the FTP service is entered, click Apply in the Actions pane to save configuration settings.

Step 2: Configure the external IPv4 Address for a specific FTP site

In this section, configure the external IPv4 address for the specific FTP site that was created earlier. Use the following steps:

1. Go to IIS Manager. In the Connections pane, click the FTP site that was created earlier in the tree, Double-click the FTP Firewall Support icon in the list of features.

Enter the IPv4 address of the external-facing address of the corresponding firewall server for the External IP Address of the Firewall setting.

Once the external IPv4 address of the firewall server is entered, click Apply in the Actions pane to save configuration settings.

Step 3: Configure Windows Firewall Settings

Using Windows Firewall with non-secure FTP traffic

To configure Windows Firewall to allow non-secure FTP traffic, use the following steps:

Open a command prompt: click Start, then All Programs, then Accessories, then Command Prompt.
To open port 21 on the firewall, type the following syntax then hit enter:

netsh advfirewall firewall add rule name="FTP (non-SSL)" action=allow protocol=TCP dir=in localport=21

To enable stateful FTP filtering that will dynamically open ports for data connections, type the following syntax then hit enter:

netsh advfirewall set global StatefulFtp enable

Using Windows Firewall with secure FTPs over SSL traffic

To configure Windows Firewall to allow secure FTPs traffic, use the following steps:

Open a command prompt: click Start, then All Programs, then Accessories, then Command Prompt.
To configure the firewall to allow the FTP service to listen on all ports that it opens, type the following syntax then hit enter
netsh advfirewall firewall add rule name="FTP for IIS" service=ftpsvc action=allow protocol=TCP dir=in
To disable stateful FTP filtering so that Windows Firewall will not block FTP traffic, type the following syntax then hit enter:
netsh advfirewall set global StatefulFtp disable

For more details visit the reference link.

How to configure FTP 7 or later version for HC panel?

Tue, 16 Mar 2010 14:35:41 GMT

Question: How to configure MS-FTP7 or later version for HC panel?

Answer: Given below are the steps which should to be ensured before configuring MSFTP 7.x on the server with HC panel.

Open IIS by clicking Start :: Run :: inetmgr ( Press Enter).
Right click on Sites :: Add new FTP site, give new ftp site name as Default FTP Site or any other meaningful name and set Physical Path C:\inetpub\ftproot (if this path does not exist then create it and give Everyone full permission on it).
Set IP Address = All unassigned, port = 21 and press NEXT.
On the last page keep Anonymous unchecked and check Basic authentication. Kindly do not make any changes on this page. Click Finish.
Select newly created Default FTP Site and then click on Windows pane on right side. Here double click on FTP User Isolation and select option User name Directory (Disable global virtual directories).
Now right click on Default FTP Site. Chose option Add virtual Directory.
Give Alias = "LocalUser" and Physical path = "c:\inetpub\ftproot" (same as you mentioned in step#3). The LocalUser folder only works for server level (local) usernames.

Note: If you have enabled option to store Web Server users (FTP) in the Active Directory then you must create the Alias with Domain Name.
For example, if you have connected to the domain controller with credentials such as DC1\User then create Virtual Directory Alias with name " DC1 " instead of LocalUser.

Now for HC9 panel, login as host then go to the menu Manage Servers :: My Servers :: Edit Server :: Web Server.

Select FTP Server : FTP 7
IPLess FTP Site : Default FTP Site
Virtual Directory Name : LocalUser (or in case Active Directory then insert DC name)

For HC10 panel, login as a host then go to Configurations :: Server Manager :: Servers :: Edit :: Web Server :: MS FTP Settings

IPLess FTP Site : Default FTP Site
Virtual Directory Name : LocalUser (or in case Active Directory then insert DC name)

If you want to configure FTP 7 with Windows Firewall then please consult with this Article

FTP - User can access to any website if he knows the Domain name

Tue, 05 Jan 2010 13:07:17 GMT

Question: A user can FTP to any other web site if he knows the domain name by giving it in Default Remote Directory in the FTP client.

Solution:
This security problem is due to insufficient security settings on the server. Your server's security is set to default installation which is not suitable for a hosting server.

Follow the security guide lines below to secure the FTP access to the server.

Step 1: Remove Everyone from Root

First, we need to replace the default permission for "Everyone" or anonymous users to access your drives (including anonymous users/guests).

Go to Windows Explorer, expand My Computer, right-click on your hard drive(s), and select Properties.
Go into the Security tab. Select Everyone, Click Remove.
Click Add button, select Administrators and SYSTEM, click Add, click OK. Select Administrators and System one-by-one and enable check box labeled Full Control, and click OK.

Step 2: Set Default FTP Home Directory

Set a folder where FTP user should land in case if he can not access his home folder.

Open Internet Services Manager. To open Internet Services Manager, click Start, point to Settings, and then click Control Panel. Double-click Administrative Tools, and then double-click Internet Services Manager.
In the Internet Information Services console, click to expand your server name, and then click Default FTP Site folder, click Properties.
On the Home Directory tab, provide a local path such as c:\inetpub\ftproot and verify that the Read check box is checked. Click OK.

Step 3: Set Read Permissions for Everyone on Default FTP Site's Local Path

Everyone should be given Read permission otherwise FTP error 530 Home Directory Inaccessible will result.

To set Everyone control, follow these steps: Open My Computer, select the directory of Local Path that you checked in step 3 above (e.g. c:\inetpub\ftproot), and open its property sheets.
Make sure windows account group Everyone is listed on the Security property sheet. Under Permissions, select the Read access for the Everyone group. Use Allow to specifically allow access and Deny to specifically deny access.

Note:

If in account group Everyone is not listed, you may add it by clicking the Add button.
If PHP, Perl, ColdFusion is installed on the server then you are required to give Everyone Full Control on PHP/Perl/CF installation folder otherwise scripts may not run.

How to configure GENE6 FTP server on windows machine?

Fri, 11 Dec 2009 14:55:12 GMT

Question: How to configure GENE6 FTP server on windows machine?
Solution:
Follow the steps given below to properly configure GENE6 with HC.

Step for x86 machines:

First of all create a Default FTP site manually in GENE6 FTP Server.
Then login to HC panel as "host admin".
Go to the location Server Manager :: Global Settings and here select GENE6 as your FTP Server.
After this go to Server Manager :: Edit Server :: Webserver. Here you will configure GENE6 FTP Server.

Following above points will configure GENE6 with HC. Now as you will add webadmin accounts these will also be added as FTP accounts inside the GENE6 FTP Server.

Steps for x64 machines:

Note: Repeat step (1-4) mentioned above as it is on x64 machines. Now after this follow these steps:

Open registry using regedit and go to installation path of Gene6 FTP server which is: SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Gene6 FTP Server_is1.
Here copy the contents of this Inno Setup: App Path attribute on right side pane.
Now go to this registry entry, SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall and right click it.
Here create a new key with the name Gene6 FTP Server_is1 and add an attribute Inno Setup: App Path as string type to it on right side pane.
Now right click it, click modify and paste the value which you copied in step# 2.