Re: Problem with IIS6 FTP and Windows Firewall

Tech-Archive recommends: Fix windows errors by optimizing your registry

Bernard,

Firstly, thanks for your help. Here the tests you asked:

I tried upload with ftp.exe and it does succesfully !!!! now I'm getting
more confused :-)

Below the IIS FTP log file using FTP.EXE

[227]USER upload 331 0
[227]PASS - 230 0
[227]created /upload/teste.mp3 226 0
[227]QUIT - 226 0

Now, same file, but using another FTP client (which continues to freeze)

[228]USER upload 331 0
[228]PASS - 230 0
[228]created /upload/teste2.mp3 226 0

It does not quit, it uploads the file, it ends the connection, but no log is
addded here....

Regards,

Ariel

"Bernard Cheah [MVP]" wrote:

what if you try upload with ftp.exe ?

what's the status code in IIS Ftp log file ? 426?

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/


"Ariel" <Ariel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:79E7B709-8124-4BFC-B0FB-504DF84FC5A2@xxxxxxxxxxxxxxxx
Hi everyone !!

Have an odd problem. My server configuration is windows server 2003 with
IIS6 and Windows Firewall.

When I try to upload a file larger than 1Mb from any client to the FTP
Server, I do succesfully upload the file, but the connection in my client
keeps "freeze" and I have to cancel it manually (on the server side, the
session was disconnected as it finished the upload).
When the file is shorter (let's say, 100kb) the upload is done normally.

Now, if I turn off the Windows Firewall, it does not matter the size of
the
file, the upload always finish succesfully, my client does not "freeze"
and
in the server the connection remains until I disconnect it.

Windows Firewall Configuration:
PORT 21 and 22 Excepted from FW
FTP Server activated in the Local Area Connection, in the "Advance" menu

Any clues ?? :-)

Thanks,

Ariel





.

Relevant Pages

  • Re: File Upload - Security Issues
    ... You want to upload a file for what reason and ... these viruses have less chance of being able to execute (even if succeeded ... :> file and what pitfalls you see re: security might be helpful on this ... :>: files to an IIS server that doesn't have MS Office actually installed? ...
    (microsoft.public.scripting.vbscript)
  • Re: File Upload - Security Issues
    ... uploaded and the user could upload any or all of these in theory. ... There is no one product that can give you 100% security, ... > Code doesn't execute in local memory space unless remote user has rights ... > You don't have MS Office installed on the server. ...
    (microsoft.public.scripting.vbscript)
  • pure-ftp nologin
    ... I have a server running FreeBSD 6.3. ... # If you want to enable PAM authentication, ... AnonymousCanCreateDirs no ... # Disallow anonymous users to upload new files ...
    (comp.unix.bsd.freebsd.misc)
  • [NT] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Collaboration Server is "a full-featured and integrated mail and instant ... attachment upload feature that may be exploited to upload files to ... * DeskNow Mail and Collaboration Server version 2.5.12 and prior ...
    (Securiteam)
  • Re: [Full-disclosure] phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
    ... app that allows the user to upload an image of some type. ... Internet Explorer ignores the content type sent by the web server and ... > HTML code instead. ... > upload it as a phpBB avatar. ...
    (Full-Disclosure)