Re: 2003 FTP with IIS

From: Alun Jones [MSFT] (alunj_at_online.microsoft.com)
Date: 10/19/04 

Date: Tue, 19 Oct 2004 14:28:18 -0700

"Paul Baker [MVP, Windows - SDK]" <paulb@online.rochester.rr.com> wrote in
message news:%23e7PRshtEHA.3984@TK2MSFTNGP09.phx.gbl...
> Passive FTP is compatible with the Windows XP Service Pack 2 firewall.
> However, the default in Windows XP is active FTP and installing Service
> Pack
> 2 preserves the setting. Therefore the Service Pack 2 firewall breaks FTP
> in
> Internet Explorer by default.

This is by design on the firewall's part - after all, you'd hate to have all
those ports open for incoming traffic unless you actually used them, yes?
Secure by Default is one of the goals we're working hard on keeping to - and
that means that the firewall generally isn't opened up for everything that
could be running on the machine. It is the work of moments to tell the
firewall to allow Internet Explorer to open up whatever ports it likes, or
(more secure) to switch Internet Explorer into using PASV mode.

I can't comment on the defaults for Internet Explorer in different versions
of Windows XP - I don't have a fresh install handy to check right now.

> Does the FTP command uses that setting?

The command line ftp.exe tool only supports active mode FTP.

> But either way, someone has to open a random port.
>
> What are you suggested solutions? I would like to hear them.

My suggested solutions at present are not suitable for publication.

Alun.
~~~~

Relevant Pages
Quantcast