FTP setup -- iis ftp

anonymous NO[at]SPAM discussions.microsoft.com
7/4/2004 8:09:26 AM

Thanks for the quick reply.
I have run the cmd's that are suggested on the file and
can see that I have a TCP listening on 0.0.0.0:21 ...but
how do I turn it off?
Presumably 0.0.0.0:21 is listening on all available ports
for ftp? Which is why I'm unable to setup a new service?

[quoted text, click to view]

Paul Lynch
7/4/2004 3:27:31 PM

On Sun, 4 Jul 2004 06:34:20 -0700, "Rupert" <rcREMOVE@luxyachts.com>
[quoted text, click to view]

Rupert,

This error message indicates that another process is listening on port
21 on the IP address that you have selected for your IIS FTP service.

Refer to this KB article for details on how to determine which process
is using port 21 :

You Receive an Error Message When You Try to Start the Web Service
http://support.microsoft.com/?id=261194

Regards,

Paul Lynch

jeff.nospam NO[at]SPAM zina.com
7/4/2004 7:56:59 PM

On Sun, 4 Jul 2004 08:09:26 -0700,
[quoted text, click to view]

Yep. Something is already using port 21. Use one of the third-party
tools listed in the KB article, such as Active Ports, you find the
process that's using the port.

Jeff

[quoted text, click to view]

Paul Lynch
7/5/2004 9:15:54 AM

On Sun, 4 Jul 2004 08:09:26 -0700,
[quoted text, click to view]

OK, something is clearly listening on port 21, what you now have to do
is determine what that 'something' is. It is very probably an FTP
service of some sort.

The easiest thing to do would be to connect to your own IP address
using either an FTP client or the command prompt client in Windows and
see what banner (if any) is returned. That should give you a clue as
to the nature of the process which is grabbing port 21.

Alternatively you could try running TCPView from Sysinternals :
http://www.sysinternals.com/ntw2k/source/tcpview.shtml

To 'turn it off' you need to stop the program or service that is
running and currently using port 21.

However, and perhaps more importantly, you need to ask the question,
if I didn't install this service which is grabbing port 21 on my
machine then who did ?

When you've answered that question you may wish to read this :

http://securityadmin.info/faq.asp#hacked

Regards,

Paul Lynch

rc.REMOVE NO[at]SPAM luxyachts.com
7/6/2004 5:53:56 AM

Problem solved.
The Vision tool from Foundstone was the easiest to use
and locate the problem.
A program called SafeTP was running on the server and was
listening on the FTP port. I am not sure how it got there
but I suspect my web programmer...
Thank you both for your assistance.
Regards,
Rupert

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis ftp

iis ftp : FTP setup