Security Basics mailing list archives

Re: Windows XP and FTP


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 11 Jan 2006 14:46:44 +0100

On 2006-01-10 koremeltdown () hotmail com wrote:
I have Windows XP (as do many of my clients) and have noticed
something strange. When trying to access my server(s) via FTP, when
Windows (XP Pro) Firewall is turned on, you cannot perform this task.
Sometimes it has problems resolving the hostname, sometimes it just
doesn't connect at all. When disabling Windows Firewall FTP works
fine, however when just enabling FTP Access via the firewall
configuration it doesn't seem to want to work. My XP using clients
seem to be having the same problem.

Looks like you (and your clients) are using FTP in active mode. In that
case the FTP server tries to establish the data connection to the client
which is then intercepted by the Windows Firewall. Try using passive
mode.

If you use the commandline FTP client: ftp.exe from Windows does only
support active mode IIRC, so use something like ncftp [1] instead.

[1] http://www.ncftp.com/

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


Current thread: