Re: Windows 2003 SP2 and FTP

the iwam/iusr password issue should not cause by sp2.
i would guess exchange could be the cause :)

going back to ftp. what do you got when using ftp.exe to connect?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Synapse120" <Synapse120@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AE2A0408-4D3B-4940-A450-ED204B59595A@xxxxxxxxxxxxxxxx
I have found out the root of all my problems the IWAM user and IUSR were
not
synced after the application of SP2. We are having similar problems
though
with the windows firewall for our exchange servers. We have GP set to
protect all connections, and only after a reboot of the server noone can
connect to the exchange server, we must disable the protect all
connections
turn off the firewall then turn the firewall back on, and re enable
protect
all connections, we have to repeat this process each time a server reboot
is
required, until we figure out the solution. One thing that i have noticed
that is really strange, the domain controllers all have the firewall
turned
on, but they are using the non domain profile, by default logged in with a
domain account. I think part of the problem may be there.

Thats one thing i am looking into,

I will keep you posted on any info i come up with.

Steve

"Gary" wrote:

No, I don't have anonymous access enabled on FTP server.

I am using domain credentials since it is internal server but it doesn't
work.

Gary

"Synapse120" wrote:

I am having similar issues after installing SP2 on my windows 2003 box.
however mine has some slight variations. My FTP will work when i login
using
domain credentials. I lost all ability with anonymous access. This
happens
regardless of the windows firewall settings.

Do you have anonymous access to your ftp enabled?

My question is what did microsoft do with the security settings for the
IUSR
and IWAM accounts, are they related?

MS has done this before with send as persmissions for exchange, so i
would
not be surprised.

Maybe someone out there has some more insight to our problems.

Thank you, Steve

"Gary" wrote:

Yes, this it is.

If you turn Windows Firewall off on the server, everything works
fine. maybe
that is the only way. Shall I give up? ����

Gary



"Bernard Cheah [MVP]" wrote:

Does this happen locally ?

let me get sp2 into my test box and test.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Gary" <Gary@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@xxxxxxxxxxxxxxxx
Here it is:

============
C:\Documents and Settings\Gary Xu>ftp
ftp> open 172.16.1.3
Connected to 172.16.1.3.
220 Microsoft FTP Service
User (172.16.1.3:(none)): hssdomain\xug
Connection closed by remote host.
ftp>
============
And I do have inetinfo.exe in the exception list of Windows
Firewall of
the
FTP server.

Gary

"Bernard Cheah [MVP]" wrote:

Can you post the complete ftp.exe output?

if you have set exception for inetinfo.exe... ftp will works.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Gary" <Gary@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@xxxxxxxxxxxxxxxx
I tried ftp.exe, here is what I did;
1. From DOS screen, enter ftp.exe
2. ftp>open 172.16.1.3, got the prompt for user ID and
password and I
put
them in
3. got the message: "Connection closed by remote host".

I use WS_FTP client, there is a check box "Passive mode",
check that
box
or
uncheck that box, it just doesn't work. After port 21
connected, it try
to
randomly open higher ports for data transmission, which
blocked by
Windows
Firewall.

Gary

"Bernard Cheah [MVP]" wrote:

Zzz the same old question again :)
Can you test ftp.exe from remotely? this should works as you
have the
inetinfo.exe exception defined.

what client you using? does it work in active mode?


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Gary" <Gary@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@xxxxxxxxxxxxxxxx
Thanks fot the reply. I did everything you mentioned here,
I even
added
one
to allow TCP port 20 as well. Added inetinfo.exe as
exception. Tried
ftp.exe
from command line, and got the error message "Connection
closed by
remote
host". When I looked at the remote FTP server "Client
Session", it
shows
that
port 21 connected, but on my side the FTP failed to
connect.

If I take Windows Firewall off on the W2K3 server,
everything works
fine.
I
think there is no way to make the FTP to work if I have
Windows
Firewall
activated.

Gary

"Bernard Cheah [MVP]" wrote:

I have R2 without sp2. did you allow ftp services on the
firewall ?
Windows Firewall - advanced - network connection - select
your
connect,
click settings, check ftp services....

or have you create an exception for inetinfo.exe ?

can you test it out with ftp.exe first?


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Gary" <Gary@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CBA63621-6FE8-4F61-AFB4-4C5061256600@xxxxxxxxxxxxxxxx
Hi:

I installed a Windows W2K3 R2 64bit server and enabled
FTP server
for
internal use. After I installed SP2 on W2K3 server, I
cannot
connect
FTP
anymore. But if I turn Windows Firewall off on that
server, FTP
works
fine.
How can I turn Firewall on and make FTP to work. I am
using
WS_FTP.
Thanks.














.

Relevant Pages

  • Re: Being hacked...
    ... Are you offering a webserver and ftp server to users on the internet as per having ... FTP and HTTP open? ... For internet attacks what I would look for is patterns in the firewall ... I am not an expert on IIS by any means but I do know if you are using FTP and IIS you ...
    (microsoft.public.win2000.security)
  • RE: FTP Window of opportunity?
    ... does it seemingly accept the connections and drop them once the response ... Subject: FTP Window of opportunity? ... blocked by the firewall. ... the FTP port shows up. ...
    (Pen-Test)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... Port) in the Exceptions tab and uncheck the pre-defined FTP Server in the ... list and exception is allowed (of coz tight to the scope of your exception ... I decided to try adding a port 21 in the firewall exception list just to ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... I only enabled the FTP Server service in advance settings. ... just the 'network connection setting' in the firewall advanced tab or you ... Windows Firewall behavior? ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Can Somone Tell Me If We Have a Hacker?
    ... your firewall to never see that stuff again. ... Those types of attacks DO work. ... beginners out there do that stuff thinking no one will find their FTP site. ... FTP server" which is probably not an option. ...
    (microsoft.public.inetserver.iis.security)