RE: Windows XP and FTP

["Roger A. Grimes" <roger () banneretcs com>]

I'm not sure about your specific problem, but try creating an exception
for \windows\system32\ftp.exe

http://support.microsoft.com/default.aspx?kbid=842242

I regularly use FTP with Windows firewall on and it works just fine, but
different clients (using PASSIVE or ACTIVE...I forget which) I guess
could require an inbound connection. You don't say which ftp client you
are using, so I'm assuming MS's ftp.exe.

Of course, the hostname resolutions problems have nothing to do with
FTP...so you've got another issue (i.e. DNS) going on as well.


-----Original Message-----
From: koremeltdown () hotmail com [mailto:koremeltdown () hotmail com] 
Sent: Monday, January 09, 2006 8:11 PM
To: security-basics () securityfocus com
Subject: Windows XP and FTP

Hi there list,

I have come accross something that I am not sure how to tackle.
I have Windows XP (as do many of my clients) and have noticed something
strange.
When trying to access my server(s) via FTP, when Windows (XP Pro)
Firewall is turned on, you cannot perform this task. Sometimes it has
problems resolving the hostname, sometimes it just doesn't connect at
all.
When disabling Windows Firewall FTP works fine, however when just
enabling FTP Access via the firewall configuration it doesn't seem to
want to work. My XP using clients seem to be having the same problem.
I could ask all of my XP using clients to just disable their XP Firewall
when uploading their websites via FTP, but I don't think the more savvy
customers would appreciate doing that (they are smart enough to realise
what it means to disable a firewall on todays internet).
My question to the list is, does anyone know how to correctly configure
XP Firewall to get around this issue, or is disabling the firewall the
only way? I would like to include this in my FAQ, so the easier
workthrough the better.
THanks guys and gals!

Kindest of regards,

Hamish Stanaway, Director

Absolute Web Solutions (New Zealand) Limited
http://www.absolutewebhosting.biz/

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------