Install Configure FTP Server With SSL Using FileZilla Server and FTP Client Using CuteFTP (part 1)

Now I want show you how to install and configure FileZilla Server in Windows server.
Download FileZilla Server
http://downloads.sourceforge.net/filezilla/FileZilla_Server-0_9_24.exe
Installing FileZilla Server
- Run FileZilla_Server-0_9_23.exe
- In License Agreement click I Agree button.

- Choose components you wish to install. Then click Next > button.

- Choose install location. Next >.

- Startup settings. Next >.

- Install.

- After installation complete, Close.

Configuring FileZilla Server
- You must configure like the picture below.
- Connect to server 127.0.0.1. Check on Always connect to this server. OK.

- If you see like below, it mean success to connect to server.

- In menu bar, click Edit > Setting.

- In General Settings, types port number on Listen on this ports. I types 2121.

- In custom welcome message, types message you want.

- IP bindings.

- IP Filter.

- In Passive mode settings, use the following IP, types 100.100.100.100 (change with your own server IP). In custom port range types 50000 - 51000.

- Security settings.

- Miscellaneous.

- Admin Interface settings.

- Logging.

- Gss Settings.

- Speed Limits.

- Filetransfer compression

- SSL/TLS settings, check on Enable SSl/TLS support, Allow explicit SSL/TLS on normal connections, and Force explicit SSL/TLS. On Listen for SSL/TLS-only connections on the following ports: 990.
Now we need to create a certificate. Click on Generate new certificate button.
- Fill your own information. Then Click Browse button to save key and certificate file.

- Save your certificate with extention .crt

- Click on Generate certificate button.

- Click OK after successfullly.

- You will see like this below.

- In Autoban setting like below. Then click OK button.

- OK.

- Click on OK button again.

Create User
- In menu bar, click Edit > Users.
- In General setting, Click Add button for add new users.

- Types name of new user account.

- Types password for new user account.

- In Shared folders setting, click Add button.

- Choose which folder do you want to share. Then click OK button.

- OK.

Setting FTP server with FileZilla Server done. DON'T FORGET to open port 990 and 50000-51000 in firewall.
I'll show you how to setting for FTP Client with CuteFTP in next chapter (part 2).
Thank you.
Recent blog posts |
Recent comments
|
Comments
How another one connect
I want to ask how any other connect with my computer like if i use some other servers
ftp.t35.com
so what is my computer address like some ip or other
please tell me at my email or reply here
suppose i want to connect to my computer from office what adderss i use to connect with it.?
you server public ip address
you server public ip address of course :)
if you need to ask anything feel free to contact me via contact us form thank you
Thanks, worked on my server
Thanks, worked on my server
PERFERCT
THANK YOU this tutorial
time out, could not connect to server
Hi there, it not works for me, always saying: connected time out,could not connect to server.."
I followed your tutorial,setup exactly same port as you, but a little different is my xp pc from my office is behind the firewall(FortiGate 80c), and I open up the port 2121 from firewall,configuration as below
virtual IP mapping
type static NAT
port forwarding
external IP address/range 0.0.0.0
mapped IP address/range 10.2.1.183
external service port 2121
map to port 2121
public IP is static, as well we already have a Linux server as FTP server, port 20 21 forwarding to this pc
could you please figure it out, or some idea?
you also need to make sure
you also need to make sure you allow your winxp client ip address to connect to port 2121 tcp
I follow your
I follow your tutorial,unfortunately not works for me at all,Wht should I do to set up FileZilla FTP server as my office pc in XP is behind a firewall? My pc has a private IP (10.2.1.111) and my firewall use virtual IP function port forwarding, static public IP.
right now we already have a Linux server as ftp server, but I need to setup the other one, so I open up port 2121 through the firewall, configration as below:
virtual IP mapping:
type :static NAT external IP address/range 0.0.0.0
mapped IP address/range 10.2.1.111
external service port 2121
map to port 2121
could you please help me figure it out? thanks
you need to check few stuff
you need to check few stuff below :
1. make sure your filezilla ftp server is up and running
2. please make sure you need to open port 2121 tcp , 20tcp (ftpdata) and passive range ip port such as 10000 - 11000 tcp in your router /firewall
3. make sure your winxp client didn't blocked anything related to ftp port above
4. try to ftp via command line like :
c:\>ftp <ftp server ip> 2121
make sure you receive a filezilla ftp greetings
hope this can help
thanks man, right now it
thanks man, right now it works internal network since I add port 2121 from this Filezilla server and turn off firewall, as well I add 2121 port from the test xp pc as Filezilla Client,
but it not works from out building pc, which is what I do the same:turn off firewall, add port 2121 with my public ip address, after running,the following messages are
from Filezilla server:
425 Can't open data connection
from Filezilla client
Command: PWD
Response: 257 “/” is current directory
Command: PASV
Response: 227 Entering Passive Mode (xxx,xxx,x,xxx,195,82) public ip
Command: MLSD
Response: 425 Can’t open data connection
Error: Failed to retrieve directory listing
Response: 421 Connection time out
BTW, I'm wondering,what IP I should add from outside Filezilla client (i.e home PC)when adding port: public (my server public or home ISP )or private (home one, like 192.168.....) ?
thanks you so much, waiting for your reply
it's passive mode... you need
it's passive mode... you need to allow range tcp port such as 10000 - 11000
and make sure you allow it in your firewall/router
How Can I limit connection to 1 internal Lan address?
Hi all,
I setup FileZilla ftp server and it works good. I need to know how to set it to limit incoming connections to 1 ip address that is on the home network. It is an ip camera that sends motion video clips when motion is detected. I don't want ANY outside connections from the web to get in to the FileZilla server. I ONLY want it to be able to connect to this 1 local lan address from this ip camera. The local ip camera's ip is example "10.0.1.15" it is set to be permanent. I tried disabling the port forwarding of port 21 in the router's settings, but then the camera couldn't connect to FileZilla ftp server. The computer that FileZilla is on, has ip of example "10.0.1.10" and is set to be permanent also. I was checking FileZilla the other day, and someone was trying to log into it, but kept putting in the wrong password, so it refused. I quickly shut down FileZilla, and unplugged the cable modem from the internet. My setup is pretty much like most people's, cable internet coming in to cable modem, then to home wire/wireless router. Computer running FileZilla is wired to router, and ip camera connects to router with wireless, with WPA2 password. Can someone help me stop ALL incoming connections (outside web) from connecting to FileZilla? Thanks in advance.
first you need to disable
first you need to disable port 21 all : all
then allow this ip 10.0.1.15 which is your local ip camera
very nice
very nice
Under
Under "edit settings/listen on these ports" your tutorial has "2121" I understood that it should be set to listen on ports 20 and 21. Is this an error or does it work? So far yours seems to be the best tutorial I have found, but while I was trying to get FZ Server setup yesterday I did come across an adobe file with instructions on how to open an ftp port on my Westell model 327 router. It says 20 and 21.
hei.. yea in my tutorial we
hei.. yea in my tutorial we are using port 2121 to ftp into the filezilla server.
you can change it to port 21 instead of 2121
FYI : port 21 is for ftp command port and port 20 is for ftp data transfer port
time out, could not connect to server
Hi there, it not works for me, always saying: connected time out,could not connect to server.."
I followed your tutorial,setup exactly same port as you, but a little different is my xp pc from my office is behind the firewall(FortiGate 80c), and I open up the port 2121 from firewall,configuration as below
virtual IP mapping
type static NAT
port forwarding
external IP address/range 0.0.0.0
mapped IP address/range 10.2.1.183
external service port 2121
map to port 2121
public IP is static, as well we already have a Linux server as FTP server, port 20 21 forwarding to this pc
could you please figure it out, or some idea?
thanks
thanks for this article
SSL with FileZilla.
Now I am confused....testing with SSL disabled and connecting to port 21...works fine...
...but...looking at the log on the Server I do not see a 227 message when I connect via Port 21...which is perhaps why it worked before I added rerouring for Ports 50000 to 50100.
So, the odd conclusion is; with SSL disabled there is no message 227 and with SSL enabled there is a message 227 on the Server log.
Setting up SSL with FileZilla
Hello,
My FTP Server is behind a NAT router.
The Router is given to routing its Port 21 to internal Port 21 of the PC which is running FTP Server.
With SSL disabled on FTP Server, I connect via Port 21 - no problems. So far so good, excited by the prospect of enabling SSL I dare to go where I have never been before ...SSL country.
So then I decide to enable SSL on the Server.
The router is given to routing its Port 990 to internal Port 990 of the PC which is running FTP Server and
I have followed all of the steps to set up SSL on FileZilla.
i.e. SSL/TLS Settings set so all boxes are ticket. Certificate generated and given a home. Key password left blank.
Port 990 selected. Press OK. Then Quit. Then Stop FTP Server. Then Start FTP Server. Restart Server Interface. All looks ok.
Ah...but then when I connect via Client to Server, via Port 990...aahhh...
I connect ok,...
2009-10-14 12:23:53 672 0 Command: PASV
2009-10-14 12:23:53 672 0 Response: 227 Entering Passive Mode (192,168,2,102,195,82)
2009-10-14 12:23:53 672 0 Status: Server sent passive reply with unroutable address. Using server address instead.
2009-10-14 12:23:53 672 0 Trace: Reply: 192.168.2.102, peer: 82.83.104.4
Looking at Line 2. ...Response: 227 Entering Passive Mode (192,168,2,102,195,82) ie Response was to Port 50002 (256*195 + 82)
...but this Port is not configured on my Router...Hmmm...so back to the Router and added rule to reroute its Ports 50000 to 50100 to internal Ports 50000 to 50100 of the PC which is running FTP Server.
Remember: In the FTP Server Settings > Passive Mode Settings > Use Custom Port Range is 50000 to 50100 ...ahhh.
Damn, it works! The Router needs to reroute Ports 50000 to 50100 to the same Range on the PC running the FTP Server.
Try it ...it may work!
GREAT artickle a lot of
GREAT artickle a lot of helpful pictures! thanks for this
Re: [#RDP-354769]: sorun var sitede
GOOD ARTİCLE.
BEHIND A NAT DEVICE
hi,
Wht should I do to set up FileZilla FTP server as my pc is behind a NAT device. My pc has a private IP (192.168.1.11) and my NAT device has a DYNAMIC public IP.
Marcus
you need to setup a port
you need to setup a port forwarding between your server and your PC
simple forward port 20 and 21 TCP into your PC ip address.
Filezilla Server setup
Under "edit settings/listen on these ports" your tutorial has "2121" I understood that it should be set to listen on ports 20 and 21. Is this an error or does it work? So far yours seems to be the best tutorial I have found, but while I was trying to get FZ Server setup yesterday I did come across an adobe file with instructions on how to open an ftp port on my Westell model 327 router. It says 20 and 21.
normally ftp is listen on
normally ftp is listen on port 21 TCP and port 20 TCP as FTP data. but in our tutorial we are using port 2121 TCP as example. You can safely change it to 21 TCP on the installation
Thank you so much!
I just got my first PC with server 2008 standard edition setup in a data center and have been pulling my hair out trying to setup IIS. Finally I gave up and looked to Filezilla which was nearly as frustrating, until I read your tutorial. Thank you so very much for laying it out for me. I really appreciate it!
hei tim... you're welcome :)
hei tim... you're welcome :)
Good Job Providing Matching Server and Client Setup Info!
In addition to information provided by other sources, e.g., Wiki Filezilla- Network Configuration, your server and client set of comments and screen shots helped me adjust client settings and get secured FTP (w/TLS) working. Much appreciated!
Good job!
Orlando Stevenson
http://thisweekinsecurity.blogspot.com
Post new comment