|
|
You're in the
iis ftp
group:Windows 2003 SP2 and FTP
iis ftp:
Hi:
I installed a Windows W2K3 R2 64bit server and enabled FTP server for internal use. After I installed SP2 on W2K3 server, I cannot connect FTP anymore. But if I turn Windows Firewall off on that server, FTP works fine.
I have R2 without sp2. did you allow ftp services on the firewall ?
Windows Firewall - advanced - network connection - select your connect, click settings, check ftp services.... or have you create an exception for inetinfo.exe ? can you test it out with ftp.exe first? -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > Hi: > > I installed a Windows W2K3 R2 64bit server and enabled FTP server for > internal use. After I installed SP2 on W2K3 server, I cannot connect FTP > anymore. But if I turn Windows Firewall off on that server, FTP works > fine. > How can I turn Firewall on and make FTP to work. I am using WS_FTP. > Thanks.
Thanks fot the reply. I did everything you mentioned here, I even added one
to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried ftp.exe from command line, and got the error message "Connection closed by remote host". When I looked at the remote FTP server "Client Session", it shows that port 21 connected, but on my side the FTP failed to connect. If I take Windows Firewall off on the W2K3 server, everything works fine. I think there is no way to make the FTP to work if I have Windows Firewall activated. Gary [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> I have R2 without sp2. did you allow ftp services on the firewall ? > Windows Firewall - advanced - network connection - select your connect, > click settings, check ftp services.... > > or have you create an exception for inetinfo.exe ? > > can you test it out with ftp.exe first? > > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > > Hi: > > > > I installed a Windows W2K3 R2 64bit server and enabled FTP server for > > internal use. After I installed SP2 on W2K3 server, I cannot connect FTP > > anymore. But if I turn Windows Firewall off on that server, FTP works > > fine. > > How can I turn Firewall on and make FTP to work. I am using WS_FTP. > > Thanks. > >
Zzz the same old question again :)
Can you test ftp.exe from remotely? this should works as you have the inetinfo.exe exception defined. what client you using? does it work in active mode? -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > Thanks fot the reply. I did everything you mentioned here, I even added > one > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > ftp.exe > from command line, and got the error message "Connection closed by remote > host". When I looked at the remote FTP server "Client Session", it shows > that > port 21 connected, but on my side the FTP failed to connect. > > If I take Windows Firewall off on the W2K3 server, everything works fine. > I > think there is no way to make the FTP to work if I have Windows Firewall > activated. > > Gary > > "Bernard Cheah [MVP]" wrote: > >> I have R2 without sp2. did you allow ftp services on the firewall ? >> Windows Firewall - advanced - network connection - select your connect, >> click settings, check ftp services.... >> >> or have you create an exception for inetinfo.exe ? >> >> can you test it out with ftp.exe first? >> >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... >> > Hi: >> > >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server for >> > internal use. After I installed SP2 on W2K3 server, I cannot connect >> > FTP >> > anymore. But if I turn Windows Firewall off on that server, FTP works >> > fine. >> > How can I turn Firewall on and make FTP to work. I am using WS_FTP. >> > Thanks. >> >> >>
I tried ftp.exe, here is what I did;
1. From DOS screen, enter ftp.exe 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I put them in 3. got the message: "Connection closed by remote host". I use WS_FTP client, there is a check box "Passive mode", check that box or uncheck that box, it just doesn't work. After port 21 connected, it try to randomly open higher ports for data transmission, which blocked by Windows Firewall. Gary [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> Zzz the same old question again :) > Can you test ftp.exe from remotely? this should works as you have the > inetinfo.exe exception defined. > > what client you using? does it work in active mode? > > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > > Thanks fot the reply. I did everything you mentioned here, I even added > > one > > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > > ftp.exe > > from command line, and got the error message "Connection closed by remote > > host". When I looked at the remote FTP server "Client Session", it shows > > that > > port 21 connected, but on my side the FTP failed to connect. > > > > If I take Windows Firewall off on the W2K3 server, everything works fine. > > I > > think there is no way to make the FTP to work if I have Windows Firewall > > activated. > > > > Gary > > > > "Bernard Cheah [MVP]" wrote: > > > >> I have R2 without sp2. did you allow ftp services on the firewall ? > >> Windows Firewall - advanced - network connection - select your connect, > >> click settings, check ftp services.... > >> > >> or have you create an exception for inetinfo.exe ? > >> > >> can you test it out with ftp.exe first? > >> > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis.net/ > >> http://www.iis-resources.com/ > >> http://msmvps.com/blogs/bernard/ > >> > >> > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > >> > Hi: > >> > > >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server for > >> > internal use. After I installed SP2 on W2K3 server, I cannot connect > >> > FTP > >> > anymore. But if I turn Windows Firewall off on that server, FTP works > >> > fine. > >> > How can I turn Firewall on and make FTP to work. I am using WS_FTP. > >> > Thanks. > >> > >> > >> > >
Can you post the complete ftp.exe output?
if you have set exception for inetinfo.exe... ftp will works. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... >I tried ftp.exe, here is what I did; > 1. From DOS screen, enter ftp.exe > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I put > them in > 3. got the message: "Connection closed by remote host". > > I use WS_FTP client, there is a check box "Passive mode", check that box > or > uncheck that box, it just doesn't work. After port 21 connected, it try to > randomly open higher ports for data transmission, which blocked by Windows > Firewall. > > Gary > > "Bernard Cheah [MVP]" wrote: > >> Zzz the same old question again :) >> Can you test ftp.exe from remotely? this should works as you have the >> inetinfo.exe exception defined. >> >> what client you using? does it work in active mode? >> >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... >> > Thanks fot the reply. I did everything you mentioned here, I even added >> > one >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried >> > ftp.exe >> > from command line, and got the error message "Connection closed by >> > remote >> > host". When I looked at the remote FTP server "Client Session", it >> > shows >> > that >> > port 21 connected, but on my side the FTP failed to connect. >> > >> > If I take Windows Firewall off on the W2K3 server, everything works >> > fine. >> > I >> > think there is no way to make the FTP to work if I have Windows >> > Firewall >> > activated. >> > >> > Gary >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> >> I have R2 without sp2. did you allow ftp services on the firewall ? >> >> Windows Firewall - advanced - network connection - select your >> >> connect, >> >> click settings, check ftp services.... >> >> >> >> or have you create an exception for inetinfo.exe ? >> >> >> >> can you test it out with ftp.exe first? >> >> >> >> >> >> -- >> >> Regards, >> >> Bernard Cheah >> >> http://www.iis.net/ >> >> http://www.iis-resources.com/ >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... >> >> > Hi: >> >> > >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server >> >> > for >> >> > internal use. After I installed SP2 on W2K3 server, I cannot connect >> >> > FTP >> >> > anymore. But if I turn Windows Firewall off on that server, FTP >> >> > works >> >> > fine. >> >> > How can I turn Firewall on and make FTP to work. I am using WS_FTP. >> >> > Thanks. >> >> >> >> >> >> >> >> >>
Here it is:
============ C:\Documents and Settings\Gary Xu>ftp ftp> open 172.16.1.3 Connected to 172.16.1.3. 220 Microsoft FTP Service User (172.16.1.3:(none)): hssdomain\xug Connection closed by remote host. ftp> ============ And I do have inetinfo.exe in the exception list of Windows Firewall of the FTP server. Gary [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> Can you post the complete ftp.exe output? > > if you have set exception for inetinfo.exe... ftp will works. > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > >I tried ftp.exe, here is what I did; > > 1. From DOS screen, enter ftp.exe > > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I put > > them in > > 3. got the message: "Connection closed by remote host". > > > > I use WS_FTP client, there is a check box "Passive mode", check that box > > or > > uncheck that box, it just doesn't work. After port 21 connected, it try to > > randomly open higher ports for data transmission, which blocked by Windows > > Firewall. > > > > Gary > > > > "Bernard Cheah [MVP]" wrote: > > > >> Zzz the same old question again :) > >> Can you test ftp.exe from remotely? this should works as you have the > >> inetinfo.exe exception defined. > >> > >> what client you using? does it work in active mode? > >> > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis.net/ > >> http://www.iis-resources.com/ > >> http://msmvps.com/blogs/bernard/ > >> > >> > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > >> > Thanks fot the reply. I did everything you mentioned here, I even added > >> > one > >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > >> > ftp.exe > >> > from command line, and got the error message "Connection closed by > >> > remote > >> > host". When I looked at the remote FTP server "Client Session", it > >> > shows > >> > that > >> > port 21 connected, but on my side the FTP failed to connect. > >> > > >> > If I take Windows Firewall off on the W2K3 server, everything works > >> > fine. > >> > I > >> > think there is no way to make the FTP to work if I have Windows > >> > Firewall > >> > activated. > >> > > >> > Gary > >> > > >> > "Bernard Cheah [MVP]" wrote: > >> > > >> >> I have R2 without sp2. did you allow ftp services on the firewall ? > >> >> Windows Firewall - advanced - network connection - select your > >> >> connect, > >> >> click settings, check ftp services.... > >> >> > >> >> or have you create an exception for inetinfo.exe ? > >> >> > >> >> can you test it out with ftp.exe first? > >> >> > >> >> > >> >> -- > >> >> Regards, > >> >> Bernard Cheah > >> >> http://www.iis.net/ > >> >> http://www.iis-resources.com/ > >> >> http://msmvps.com/blogs/bernard/ > >> >> > >> >> > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > >> >> > Hi: > >> >> > > >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server > >> >> > for > >> >> > internal use. After I installed SP2 on W2K3 server, I cannot connect > >> >> > FTP > >> >> > anymore. But if I turn Windows Firewall off on that server, FTP > >> >> > works > >> >> > fine. > >> >> > How can I turn Firewall on and make FTP to work. I am using WS_FTP. > >> >> > Thanks. > >> >> > >> >> > >> >> > >> > >> > >> > >
Does this happen locally ?
let me get sp2 into my test box and test. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > Here it is: > > ============ > C:\Documents and Settings\Gary Xu>ftp > ftp> open 172.16.1.3 > Connected to 172.16.1.3. > 220 Microsoft FTP Service > User (172.16.1.3:(none)): hssdomain\xug > Connection closed by remote host. > ftp> > ============ > And I do have inetinfo.exe in the exception list of Windows Firewall of > the > FTP server. > > Gary > > "Bernard Cheah [MVP]" wrote: > >> Can you post the complete ftp.exe output? >> >> if you have set exception for inetinfo.exe... ftp will works. >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... >> >I tried ftp.exe, here is what I did; >> > 1. From DOS screen, enter ftp.exe >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I >> > put >> > them in >> > 3. got the message: "Connection closed by remote host". >> > >> > I use WS_FTP client, there is a check box "Passive mode", check that >> > box >> > or >> > uncheck that box, it just doesn't work. After port 21 connected, it try >> > to >> > randomly open higher ports for data transmission, which blocked by >> > Windows >> > Firewall. >> > >> > Gary >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> >> Zzz the same old question again :) >> >> Can you test ftp.exe from remotely? this should works as you have the >> >> inetinfo.exe exception defined. >> >> >> >> what client you using? does it work in active mode? >> >> >> >> >> >> -- >> >> Regards, >> >> Bernard Cheah >> >> http://www.iis.net/ >> >> http://www.iis-resources.com/ >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... >> >> > Thanks fot the reply. I did everything you mentioned here, I even >> >> > added >> >> > one >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried >> >> > ftp.exe >> >> > from command line, and got the error message "Connection closed by >> >> > remote >> >> > host". When I looked at the remote FTP server "Client Session", it >> >> > shows >> >> > that >> >> > port 21 connected, but on my side the FTP failed to connect. >> >> > >> >> > If I take Windows Firewall off on the W2K3 server, everything works >> >> > fine. >> >> > I >> >> > think there is no way to make the FTP to work if I have Windows >> >> > Firewall >> >> > activated. >> >> > >> >> > Gary >> >> > >> >> > "Bernard Cheah [MVP]" wrote: >> >> > >> >> >> I have R2 without sp2. did you allow ftp services on the firewall ? >> >> >> Windows Firewall - advanced - network connection - select your >> >> >> connect, >> >> >> click settings, check ftp services.... >> >> >> >> >> >> or have you create an exception for inetinfo.exe ? >> >> >> >> >> >> can you test it out with ftp.exe first? >> >> >> >> >> >> >> >> >> -- >> >> >> Regards, >> >> >> Bernard Cheah >> >> >> http://www.iis.net/ >> >> >> http://www.iis-resources.com/ >> >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... >> >> >> > Hi: >> >> >> > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server >> >> >> > for >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot >> >> >> > connect >> >> >> > FTP >> >> >> > anymore. But if I turn Windows Firewall off on that server, FTP >> >> >> > works >> >> >> > fine. >> >> >> > How can I turn Firewall on and make FTP to work. I am using >> >> >> > WS_FTP. >> >> >> > Thanks. >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >>
Yes, this it is.
If you turn Windows Firewall off on the server, everything works fine. maybe that is the only way. Shall I give up? （放弃） Gary [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> Does this happen locally ? > > let me get sp2 into my test box and test. > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > > Here it is: > > > > ============ > > C:\Documents and Settings\Gary Xu>ftp > > ftp> open 172.16.1.3 > > Connected to 172.16.1.3. > > 220 Microsoft FTP Service > > User (172.16.1.3:(none)): hssdomain\xug > > Connection closed by remote host. > > ftp> > > ============ > > And I do have inetinfo.exe in the exception list of Windows Firewall of > > the > > FTP server. > > > > Gary > > > > "Bernard Cheah [MVP]" wrote: > > > >> Can you post the complete ftp.exe output? > >> > >> if you have set exception for inetinfo.exe... ftp will works. > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis.net/ > >> http://www.iis-resources.com/ > >> http://msmvps.com/blogs/bernard/ > >> > >> > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > >> >I tried ftp.exe, here is what I did; > >> > 1. From DOS screen, enter ftp.exe > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I > >> > put > >> > them in > >> > 3. got the message: "Connection closed by remote host". > >> > > >> > I use WS_FTP client, there is a check box "Passive mode", check that > >> > box > >> > or > >> > uncheck that box, it just doesn't work. After port 21 connected, it try > >> > to > >> > randomly open higher ports for data transmission, which blocked by > >> > Windows > >> > Firewall. > >> > > >> > Gary > >> > > >> > "Bernard Cheah [MVP]" wrote: > >> > > >> >> Zzz the same old question again :) > >> >> Can you test ftp.exe from remotely? this should works as you have the > >> >> inetinfo.exe exception defined. > >> >> > >> >> what client you using? does it work in active mode? > >> >> > >> >> > >> >> -- > >> >> Regards, > >> >> Bernard Cheah > >> >> http://www.iis.net/ > >> >> http://www.iis-resources.com/ > >> >> http://msmvps.com/blogs/bernard/ > >> >> > >> >> > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > >> >> > Thanks fot the reply. I did everything you mentioned here, I even > >> >> > added > >> >> > one > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > >> >> > ftp.exe > >> >> > from command line, and got the error message "Connection closed by > >> >> > remote > >> >> > host". When I looked at the remote FTP server "Client Session", it > >> >> > shows > >> >> > that > >> >> > port 21 connected, but on my side the FTP failed to connect. > >> >> > > >> >> > If I take Windows Firewall off on the W2K3 server, everything works > >> >> > fine. > >> >> > I > >> >> > think there is no way to make the FTP to work if I have Windows > >> >> > Firewall > >> >> > activated. > >> >> > > >> >> > Gary > >> >> > > >> >> > "Bernard Cheah [MVP]" wrote: > >> >> > > >> >> >> I have R2 without sp2. did you allow ftp services on the firewall ? > >> >> >> Windows Firewall - advanced - network connection - select your > >> >> >> connect, > >> >> >> click settings, check ftp services.... > >> >> >> > >> >> >> or have you create an exception for inetinfo.exe ? > >> >> >> > >> >> >> can you test it out with ftp.exe first? > >> >> >> > >> >> >> > >> >> >> -- > >> >> >> Regards, > >> >> >> Bernard Cheah > >> >> >> http://www.iis.net/ > >> >> >> http://www.iis-resources.com/ > >> >> >> http://msmvps.com/blogs/bernard/ > >> >> >> > >> >> >> > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > >> >> >> > Hi: > >> >> >> > > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server > >> >> >> > for > >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot > >> >> >> > connect > >> >> >> > FTP > >> >> >> > anymore. But if I turn Windows Firewall off on that server, FTP > >> >> >> > works > >> >> >> > fine. > >> >> >> > How can I turn Firewall on and make FTP to work. I am using > >> >> >> > WS_FTP. > >> >> >> > Thanks. > >> >> >> > >> >> >> > >> >> >> > >> >> > >> >> > >> >> > >> > >> > >> > >
I am having similar issues after installing SP2 on my windows 2003 box.
however mine has some slight variations. My FTP will work when i login using domain credentials. I lost all ability with anonymous access. This happens regardless of the windows firewall settings. Do you have anonymous access to your ftp enabled? My question is what did microsoft do with the security settings for the IUSR and IWAM accounts, are they related? MS has done this before with send as persmissions for exchange, so i would not be surprised. Maybe someone out there has some more insight to our problems. Thank you, Steve [quoted text, click to view] "Gary" wrote:
> Yes, this it is. > > If you turn Windows Firewall off on the server, everything works fine. maybe > that is the only way. Shall I give up? （放弃） > > Gary > > > > "Bernard Cheah [MVP]" wrote: > > > Does this happen locally ? > > > > let me get sp2 into my test box and test. > > > > -- > > Regards, > > Bernard Cheah > > http://www.iis.net/ > > http://www.iis-resources.com/ > > http://msmvps.com/blogs/bernard/ > > > > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > > > Here it is: > > > > > > ============ > > > C:\Documents and Settings\Gary Xu>ftp > > > ftp> open 172.16.1.3 > > > Connected to 172.16.1.3. > > > 220 Microsoft FTP Service > > > User (172.16.1.3:(none)): hssdomain\xug > > > Connection closed by remote host. > > > ftp> > > > ============ > > > And I do have inetinfo.exe in the exception list of Windows Firewall of > > > the > > > FTP server. > > > > > > Gary > > > > > > "Bernard Cheah [MVP]" wrote: > > > > > >> Can you post the complete ftp.exe output? > > >> > > >> if you have set exception for inetinfo.exe... ftp will works. > > >> > > >> -- > > >> Regards, > > >> Bernard Cheah > > >> http://www.iis.net/ > > >> http://www.iis-resources.com/ > > >> http://msmvps.com/blogs/bernard/ > > >> > > >> > > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > > >> >I tried ftp.exe, here is what I did; > > >> > 1. From DOS screen, enter ftp.exe > > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I > > >> > put > > >> > them in > > >> > 3. got the message: "Connection closed by remote host". > > >> > > > >> > I use WS_FTP client, there is a check box "Passive mode", check that > > >> > box > > >> > or > > >> > uncheck that box, it just doesn't work. After port 21 connected, it try > > >> > to > > >> > randomly open higher ports for data transmission, which blocked by > > >> > Windows > > >> > Firewall. > > >> > > > >> > Gary > > >> > > > >> > "Bernard Cheah [MVP]" wrote: > > >> > > > >> >> Zzz the same old question again :) > > >> >> Can you test ftp.exe from remotely? this should works as you have the > > >> >> inetinfo.exe exception defined. > > >> >> > > >> >> what client you using? does it work in active mode? > > >> >> > > >> >> > > >> >> -- > > >> >> Regards, > > >> >> Bernard Cheah > > >> >> http://www.iis.net/ > > >> >> http://www.iis-resources.com/ > > >> >> http://msmvps.com/blogs/bernard/ > > >> >> > > >> >> > > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > > >> >> > Thanks fot the reply. I did everything you mentioned here, I even > > >> >> > added > > >> >> > one > > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > > >> >> > ftp.exe > > >> >> > from command line, and got the error message "Connection closed by > > >> >> > remote > > >> >> > host". When I looked at the remote FTP server "Client Session", it > > >> >> > shows > > >> >> > that > > >> >> > port 21 connected, but on my side the FTP failed to connect. > > >> >> > > > >> >> > If I take Windows Firewall off on the W2K3 server, everything works > > >> >> > fine. > > >> >> > I > > >> >> > think there is no way to make the FTP to work if I have Windows > > >> >> > Firewall > > >> >> > activated. > > >> >> > > > >> >> > Gary > > >> >> > > > >> >> > "Bernard Cheah [MVP]" wrote: > > >> >> > > > >> >> >> I have R2 without sp2. did you allow ftp services on the firewall ? > > >> >> >> Windows Firewall - advanced - network connection - select your > > >> >> >> connect, > > >> >> >> click settings, check ftp services.... > > >> >> >> > > >> >> >> or have you create an exception for inetinfo.exe ? > > >> >> >> > > >> >> >> can you test it out with ftp.exe first? > > >> >> >> > > >> >> >> > > >> >> >> -- > > >> >> >> Regards, > > >> >> >> Bernard Cheah > > >> >> >> http://www.iis.net/ > > >> >> >> http://www.iis-resources.com/ > > >> >> >> http://msmvps.com/blogs/bernard/ > > >> >> >> > > >> >> >> > > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > > >> >> >> > Hi: > > >> >> >> > > > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server > > >> >> >> > for > > >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot > > >> >> >> > connect > > >> >> >> > FTP > > >> >> >> > anymore. But if I turn Windows Firewall off on that server, FTP > > >> >> >> > works > > >> >> >> > fine. > > >> >> >> > How can I turn Firewall on and make FTP to work. I am using > > >> >> >> > WS_FTP. > > >> >> >> > Thanks. > > >> >> >> > > >> >> >> > > >> >> >> > > >> >> > > >> >> > > >> >> > > >> > > >> > > >> > > > >
No, I don't have anonymous access enabled on FTP server.
I am using domain credentials since it is internal server but it doesn't work. Gary [quoted text, click to view] "Synapse120" wrote:
> I am having similar issues after installing SP2 on my windows 2003 box. > however mine has some slight variations. My FTP will work when i login using > domain credentials. I lost all ability with anonymous access. This happens > regardless of the windows firewall settings. > > Do you have anonymous access to your ftp enabled? > > My question is what did microsoft do with the security settings for the IUSR > and IWAM accounts, are they related? > > MS has done this before with send as persmissions for exchange, so i would > not be surprised. > > Maybe someone out there has some more insight to our problems. > > Thank you, Steve > > "Gary" wrote: > > > Yes, this it is. > > > > If you turn Windows Firewall off on the server, everything works fine. maybe > > that is the only way. Shall I give up? （放弃） > > > > Gary > > > > > > > > "Bernard Cheah [MVP]" wrote: > > > > > Does this happen locally ? > > > > > > let me get sp2 into my test box and test. > > > > > > -- > > > Regards, > > > Bernard Cheah > > > http://www.iis.net/ > > > http://www.iis-resources.com/ > > > http://msmvps.com/blogs/bernard/ > > > > > > > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > > > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > > > > Here it is: > > > > > > > > ============ > > > > C:\Documents and Settings\Gary Xu>ftp > > > > ftp> open 172.16.1.3 > > > > Connected to 172.16.1.3. > > > > 220 Microsoft FTP Service > > > > User (172.16.1.3:(none)): hssdomain\xug > > > > Connection closed by remote host. > > > > ftp> > > > > ============ > > > > And I do have inetinfo.exe in the exception list of Windows Firewall of > > > > the > > > > FTP server. > > > > > > > > Gary > > > > > > > > "Bernard Cheah [MVP]" wrote: > > > > > > > >> Can you post the complete ftp.exe output? > > > >> > > > >> if you have set exception for inetinfo.exe... ftp will works. > > > >> > > > >> -- > > > >> Regards, > > > >> Bernard Cheah > > > >> http://www.iis.net/ > > > >> http://www.iis-resources.com/ > > > >> http://msmvps.com/blogs/bernard/ > > > >> > > > >> > > > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > > > >> >I tried ftp.exe, here is what I did; > > > >> > 1. From DOS screen, enter ftp.exe > > > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I > > > >> > put > > > >> > them in > > > >> > 3. got the message: "Connection closed by remote host". > > > >> > > > > >> > I use WS_FTP client, there is a check box "Passive mode", check that > > > >> > box > > > >> > or > > > >> > uncheck that box, it just doesn't work. After port 21 connected, it try > > > >> > to > > > >> > randomly open higher ports for data transmission, which blocked by > > > >> > Windows > > > >> > Firewall. > > > >> > > > > >> > Gary > > > >> > > > > >> > "Bernard Cheah [MVP]" wrote: > > > >> > > > > >> >> Zzz the same old question again :) > > > >> >> Can you test ftp.exe from remotely? this should works as you have the > > > >> >> inetinfo.exe exception defined. > > > >> >> > > > >> >> what client you using? does it work in active mode? > > > >> >> > > > >> >> > > > >> >> -- > > > >> >> Regards, > > > >> >> Bernard Cheah > > > >> >> http://www.iis.net/ > > > >> >> http://www.iis-resources.com/ > > > >> >> http://msmvps.com/blogs/bernard/ > > > >> >> > > > >> >> > > > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > > > >> >> > Thanks fot the reply. I did everything you mentioned here, I even > > > >> >> > added > > > >> >> > one > > > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > > > >> >> > ftp.exe > > > >> >> > from command line, and got the error message "Connection closed by > > > >> >> > remote > > > >> >> > host". When I looked at the remote FTP server "Client Session", it > > > >> >> > shows > > > >> >> > that > > > >> >> > port 21 connected, but on my side the FTP failed to connect. > > > >> >> > > > > >> >> > If I take Windows Firewall off on the W2K3 server, everything works > > > >> >> > fine. > > > >> >> > I > > > >> >> > think there is no way to make the FTP to work if I have Windows > > > >> >> > Firewall > > > >> >> > activated. > > > >> >> > > > > >> >> > Gary > > > >> >> > > > > >> >> > "Bernard Cheah [MVP]" wrote: > > > >> >> > > > > >> >> >> I have R2 without sp2. did you allow ftp services on the firewall ? > > > >> >> >> Windows Firewall - advanced - network connection - select your > > > >> >> >> connect, > > > >> >> >> click settings, check ftp services.... > > > >> >> >> > > > >> >> >> or have you create an exception for inetinfo.exe ? > > > >> >> >> > > > >> >> >> can you test it out with ftp.exe first? > > > >> >> >> > > > >> >> >> > > > >> >> >> -- > > > >> >> >> Regards, > > > >> >> >> Bernard Cheah > > > >> >> >> http://www.iis.net/ > > > >> >> >> http://www.iis-resources.com/ > > > >> >> >> http://msmvps.com/blogs/bernard/ > > > >> >> >> > > > >> >> >> > > > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > > > >> >> >> > Hi: > > > >> >> >> > > > > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server > > > >> >> >> > for > > > >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot > > > >> >> >> > connect > > > >> >> >> > FTP > > > >> >> >> > anymore. But if I turn Windows Firewall off on that server, FTP > > > >> >> >> > works > > > >> >> >> > fine. > > > >> >> >> > How can I turn Firewall on and make FTP to work. I am using > > > >> >> >> > WS_FTP. > > > >> >> >> > Thanks. > > > >> >> >> > > > >> >> >> > > > >> >> >> > > > >> >> > > > >> >> > > > >> >> > > > >> > > > >> > > > >> > > > > > >
I have found out the root of all my problems the IWAM user and IUSR were not
synced after the application of SP2. We are having similar problems though with the windows firewall for our exchange servers. We have GP set to protect all connections, and only after a reboot of the server noone can connect to the exchange server, we must disable the protect all connections turn off the firewall then turn the firewall back on, and re enable protect all connections, we have to repeat this process each time a server reboot is required, until we figure out the solution. One thing that i have noticed that is really strange, the domain controllers all have the firewall turned on, but they are using the non domain profile, by default logged in with a domain account. I think part of the problem may be there. Thats one thing i am looking into, I will keep you posted on any info i come up with. Steve [quoted text, click to view] "Gary" wrote:
> No, I don't have anonymous access enabled on FTP server. > > I am using domain credentials since it is internal server but it doesn't work. > > Gary > > "Synapse120" wrote: > > > I am having similar issues after installing SP2 on my windows 2003 box. > > however mine has some slight variations. My FTP will work when i login using > > domain credentials. I lost all ability with anonymous access. This happens > > regardless of the windows firewall settings. > > > > Do you have anonymous access to your ftp enabled? > > > > My question is what did microsoft do with the security settings for the IUSR > > and IWAM accounts, are they related? > > > > MS has done this before with send as persmissions for exchange, so i would > > not be surprised. > > > > Maybe someone out there has some more insight to our problems. > > > > Thank you, Steve > > > > "Gary" wrote: > > > > > Yes, this it is. > > > > > > If you turn Windows Firewall off on the server, everything works fine. maybe > > > that is the only way. Shall I give up? （放弃） > > > > > > Gary > > > > > > > > > > > > "Bernard Cheah [MVP]" wrote: > > > > > > > Does this happen locally ? > > > > > > > > let me get sp2 into my test box and test. > > > > > > > > -- > > > > Regards, > > > > Bernard Cheah > > > > http://www.iis.net/ > > > > http://www.iis-resources.com/ > > > > http://msmvps.com/blogs/bernard/ > > > > > > > > > > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > > > > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > > > > > Here it is: > > > > > > > > > > ============ > > > > > C:\Documents and Settings\Gary Xu>ftp > > > > > ftp> open 172.16.1.3 > > > > > Connected to 172.16.1.3. > > > > > 220 Microsoft FTP Service > > > > > User (172.16.1.3:(none)): hssdomain\xug > > > > > Connection closed by remote host. > > > > > ftp> > > > > > ============ > > > > > And I do have inetinfo.exe in the exception list of Windows Firewall of > > > > > the > > > > > FTP server. > > > > > > > > > > Gary > > > > > > > > > > "Bernard Cheah [MVP]" wrote: > > > > > > > > > >> Can you post the complete ftp.exe output? > > > > >> > > > > >> if you have set exception for inetinfo.exe... ftp will works. > > > > >> > > > > >> -- > > > > >> Regards, > > > > >> Bernard Cheah > > > > >> http://www.iis.net/ > > > > >> http://www.iis-resources.com/ > > > > >> http://msmvps.com/blogs/bernard/ > > > > >> > > > > >> > > > > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > > > > >> >I tried ftp.exe, here is what I did; > > > > >> > 1. From DOS screen, enter ftp.exe > > > > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and I > > > > >> > put > > > > >> > them in > > > > >> > 3. got the message: "Connection closed by remote host". > > > > >> > > > > > >> > I use WS_FTP client, there is a check box "Passive mode", check that > > > > >> > box > > > > >> > or > > > > >> > uncheck that box, it just doesn't work. After port 21 connected, it try > > > > >> > to > > > > >> > randomly open higher ports for data transmission, which blocked by > > > > >> > Windows > > > > >> > Firewall. > > > > >> > > > > > >> > Gary > > > > >> > > > > > >> > "Bernard Cheah [MVP]" wrote: > > > > >> > > > > > >> >> Zzz the same old question again :) > > > > >> >> Can you test ftp.exe from remotely? this should works as you have the > > > > >> >> inetinfo.exe exception defined. > > > > >> >> > > > > >> >> what client you using? does it work in active mode? > > > > >> >> > > > > >> >> > > > > >> >> -- > > > > >> >> Regards, > > > > >> >> Bernard Cheah > > > > >> >> http://www.iis.net/ > > > > >> >> http://www.iis-resources.com/ > > > > >> >> http://msmvps.com/blogs/bernard/ > > > > >> >> > > > > >> >> > > > > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > > > > >> >> > Thanks fot the reply. I did everything you mentioned here, I even > > > > >> >> > added > > > > >> >> > one > > > > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. Tried > > > > >> >> > ftp.exe > > > > >> >> > from command line, and got the error message "Connection closed by > > > > >> >> > remote > > > > >> >> > host". When I looked at the remote FTP server "Client Session", it > > > > >> >> > shows > > > > >> >> > that > > > > >> >> > port 21 connected, but on my side the FTP failed to connect. > > > > >> >> > > > > > >> >> > If I take Windows Firewall off on the W2K3 server, everything works > > > > >> >> > fine. > > > > >> >> > I > > > > >> >> > think there is no way to make the FTP to work if I have Windows > > > > >> >> > Firewall > > > > >> >> > activated. > > > > >> >> > > > > > >> >> > Gary > > > > >> >> > > > > > >> >> > "Bernard Cheah [MVP]" wrote: > > > > >> >> > > > > > >> >> >> I have R2 without sp2. did you allow ftp services on the firewall ? > > > > >> >> >> Windows Firewall - advanced - network connection - select your > > > > >> >> >> connect, > > > > >> >> >> click settings, check ftp services.... > > > > >> >> >> > > > > >> >> >> or have you create an exception for inetinfo.exe ? > > > > >> >> >> > > > > >> >> >> can you test it out with ftp.exe first? > > > > >> >> >> > > > > >> >> >> > > > > >> >> >> -- > > > > >> >> >> Regards, > > > > >> >> >> Bernard Cheah > > > > >> >> >> http://www.iis.net/ > > > > >> >> >> http://www.iis-resources.com/ > > > > >> >> >> http://msmvps.com/blogs/bernard/ > > > > >> >> >> > > > > >> >> >> > > > > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > > > > >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > > > > >> >> >> > Hi: > > > > >> >> >> > > > > > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP server
²»Ó÷ÅÆú¡£
I just tested with SP2, and I'm can't repro what you claim. I have firewall on + inetinfo.exe defined in the exception list, and I'm able to connect from another Vista client machine via command line tool - ftp.exe -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:FB8F89C7-881E-4844-B577-0F9B273DE83D@microsoft.com... > Yes, this it is. > > If you turn Windows Firewall off on the server, everything works fine. > maybe > that is the only way. Shall I give up? （放弃） > > Gary > > > > "Bernard Cheah [MVP]" wrote: > >> Does this happen locally ? >> >> let me get sp2 into my test box and test. >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... >> > Here it is: >> > >> > ============ >> > C:\Documents and Settings\Gary Xu>ftp >> > ftp> open 172.16.1.3 >> > Connected to 172.16.1.3. >> > 220 Microsoft FTP Service >> > User (172.16.1.3:(none)): hssdomain\xug >> > Connection closed by remote host. >> > ftp> >> > ============ >> > And I do have inetinfo.exe in the exception list of Windows Firewall of >> > the >> > FTP server. >> > >> > Gary >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> >> Can you post the complete ftp.exe output? >> >> >> >> if you have set exception for inetinfo.exe... ftp will works. >> >> >> >> -- >> >> Regards, >> >> Bernard Cheah >> >> http://www.iis.net/ >> >> http://www.iis-resources.com/ >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... >> >> >I tried ftp.exe, here is what I did; >> >> > 1. From DOS screen, enter ftp.exe >> >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and >> >> > I >> >> > put >> >> > them in >> >> > 3. got the message: "Connection closed by remote host". >> >> > >> >> > I use WS_FTP client, there is a check box "Passive mode", check that >> >> > box >> >> > or >> >> > uncheck that box, it just doesn't work. After port 21 connected, it >> >> > try >> >> > to >> >> > randomly open higher ports for data transmission, which blocked by >> >> > Windows >> >> > Firewall. >> >> > >> >> > Gary >> >> > >> >> > "Bernard Cheah [MVP]" wrote: >> >> > >> >> >> Zzz the same old question again :) >> >> >> Can you test ftp.exe from remotely? this should works as you have >> >> >> the >> >> >> inetinfo.exe exception defined. >> >> >> >> >> >> what client you using? does it work in active mode? >> >> >> >> >> >> >> >> >> -- >> >> >> Regards, >> >> >> Bernard Cheah >> >> >> http://www.iis.net/ >> >> >> http://www.iis-resources.com/ >> >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... >> >> >> > Thanks fot the reply. I did everything you mentioned here, I even >> >> >> > added >> >> >> > one >> >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. >> >> >> > Tried >> >> >> > ftp.exe >> >> >> > from command line, and got the error message "Connection closed >> >> >> > by >> >> >> > remote >> >> >> > host". When I looked at the remote FTP server "Client Session", >> >> >> > it >> >> >> > shows >> >> >> > that >> >> >> > port 21 connected, but on my side the FTP failed to connect. >> >> >> > >> >> >> > If I take Windows Firewall off on the W2K3 server, everything >> >> >> > works >> >> >> > fine. >> >> >> > I >> >> >> > think there is no way to make the FTP to work if I have Windows >> >> >> > Firewall >> >> >> > activated. >> >> >> > >> >> >> > Gary >> >> >> > >> >> >> > "Bernard Cheah [MVP]" wrote: >> >> >> > >> >> >> >> I have R2 without sp2. did you allow ftp services on the >> >> >> >> firewall ? >> >> >> >> Windows Firewall - advanced - network connection - select your >> >> >> >> connect, >> >> >> >> click settings, check ftp services.... >> >> >> >> >> >> >> >> or have you create an exception for inetinfo.exe ? >> >> >> >> >> >> >> >> can you test it out with ftp.exe first? >> >> >> >> >> >> >> >> >> >> >> >> -- >> >> >> >> Regards, >> >> >> >> Bernard Cheah >> >> >> >> http://www.iis.net/ >> >> >> >> http://www.iis-resources.com/ >> >> >> >> http://msmvps.com/blogs/bernard/ >> >> >> >> >> >> >> >> >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... >> >> >> >> > Hi: >> >> >> >> > >> >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP >> >> >> >> > server >> >> >> >> > for >> >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot >> >> >> >> > connect >> >> >> >> > FTP >> >> >> >> > anymore. But if I turn Windows Firewall off on that server, >> >> >> >> > FTP >> >> >> >> > works >> >> >> >> > fine. >> >> >> >> > How can I turn Firewall on and make FTP to work. I am using >> >> >> >> > WS_FTP. >> >> >> >> > Thanks. >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >>
the iwam/iusr password issue should not cause by sp2.
i would guess exchange could be the cause :) going back to ftp. what do you got when using ftp.exe to connect? -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Synapse120" <Synapse120@discussions.microsoft.com> wrote in message
news:AE2A0408-4D3B-4940-A450-ED204B59595A@microsoft.com... >I have found out the root of all my problems the IWAM user and IUSR were >not > synced after the application of SP2. We are having similar problems > though > with the windows firewall for our exchange servers. We have GP set to > protect all connections, and only after a reboot of the server noone can > connect to the exchange server, we must disable the protect all > connections > turn off the firewall then turn the firewall back on, and re enable > protect > all connections, we have to repeat this process each time a server reboot > is > required, until we figure out the solution. One thing that i have noticed > that is really strange, the domain controllers all have the firewall > turned > on, but they are using the non domain profile, by default logged in with a > domain account. I think part of the problem may be there. > > Thats one thing i am looking into, > > I will keep you posted on any info i come up with. > > Steve > > "Gary" wrote: > >> No, I don't have anonymous access enabled on FTP server. >> >> I am using domain credentials since it is internal server but it doesn't >> work. >> >> Gary >> >> "Synapse120" wrote: >> >> > I am having similar issues after installing SP2 on my windows 2003 box. >> > however mine has some slight variations. My FTP will work when i login >> > using >> > domain credentials. I lost all ability with anonymous access. This >> > happens >> > regardless of the windows firewall settings. >> > >> > Do you have anonymous access to your ftp enabled? >> > >> > My question is what did microsoft do with the security settings for the >> > IUSR >> > and IWAM accounts, are they related? >> > >> > MS has done this before with send as persmissions for exchange, so i >> > would >> > not be surprised. >> > >> > Maybe someone out there has some more insight to our problems. >> > >> > Thank you, Steve >> > >> > "Gary" wrote: >> > >> > > Yes, this it is. >> > > >> > > If you turn Windows Firewall off on the server, everything works >> > > fine. maybe >> > > that is the only way. Shall I give up? （放弃） >> > > >> > > Gary >> > > >> > > >> > > >> > > "Bernard Cheah [MVP]" wrote: >> > > >> > > > Does this happen locally ? >> > > > >> > > > let me get sp2 into my test box and test. >> > > > >> > > > -- >> > > > Regards, >> > > > Bernard Cheah >> > > > http://www.iis.net/ >> > > > http://www.iis-resources.com/ >> > > > http://msmvps.com/blogs/bernard/ >> > > > >> > > > >> > > > "Gary" <Gary@discussions.microsoft.com> wrote in message >> > > > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... >> > > > > Here it is: >> > > > > >> > > > > ============ >> > > > > C:\Documents and Settings\Gary Xu>ftp >> > > > > ftp> open 172.16.1.3 >> > > > > Connected to 172.16.1.3. >> > > > > 220 Microsoft FTP Service >> > > > > User (172.16.1.3:(none)): hssdomain\xug >> > > > > Connection closed by remote host. >> > > > > ftp> >> > > > > ============ >> > > > > And I do have inetinfo.exe in the exception list of Windows >> > > > > Firewall of >> > > > > the >> > > > > FTP server. >> > > > > >> > > > > Gary >> > > > > >> > > > > "Bernard Cheah [MVP]" wrote: >> > > > > >> > > > >> Can you post the complete ftp.exe output? >> > > > >> >> > > > >> if you have set exception for inetinfo.exe... ftp will works. >> > > > >> >> > > > >> -- >> > > > >> Regards, >> > > > >> Bernard Cheah >> > > > >> http://www.iis.net/ >> > > > >> http://www.iis-resources.com/ >> > > > >> http://msmvps.com/blogs/bernard/ >> > > > >> >> > > > >> >> > > > >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> > > > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... >> > > > >> >I tried ftp.exe, here is what I did; >> > > > >> > 1. From DOS screen, enter ftp.exe >> > > > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and >> > > > >> > password and I >> > > > >> > put >> > > > >> > them in >> > > > >> > 3. got the message: "Connection closed by remote host". >> > > > >> > >> > > > >> > I use WS_FTP client, there is a check box "Passive mode", >> > > > >> > check that >> > > > >> > box >> > > > >> > or >> > > > >> > uncheck that box, it just doesn't work. After port 21 >> > > > >> > connected, it try >> > > > >> > to >> > > > >> > randomly open higher ports for data transmission, which >> > > > >> > blocked by >> > > > >> > Windows >> > > > >> > Firewall. >> > > > >> > >> > > > >> > Gary >> > > > >> > >> > > > >> > "Bernard Cheah [MVP]" wrote: >> > > > >> > >> > > > >> >> Zzz the same old question again :) >> > > > >> >> Can you test ftp.exe from remotely? this should works as you >> > > > >> >> have the >> > > > >> >> inetinfo.exe exception defined. >> > > > >> >> >> > > > >> >> what client you using? does it work in active mode? >> > > > >> >> >> > > > >> >> >> > > > >> >> -- >> > > > >> >> Regards, >> > > > >> >> Bernard Cheah >> > > > >> >> http://www.iis.net/ >> > > > >> >> http://www.iis-resources.com/ >> > > > >> >> http://msmvps.com/blogs/bernard/ >> > > > >> >> >> > > > >> >> >> > > > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> > > > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... >> > > > >> >> > Thanks fot the reply. I did everything you mentioned here, >> > > > >> >> > I even >> > > > >> >> > added >> > > > >> >> > one >> > > > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as >> > > > >> >> > exception. Tried >> > > > >> >> > ftp.exe >> > > > >> >> > from command line, and got the error message "Connection >> > > > >> >> > closed by >> > > > >> >> > remote >> > > > >> >> > host". When I looked at the remote FTP server "Client >> > > > >> >> > Session", it >> > > > >> >> > shows >> > > > >> >> > that >> > > > >> >> > port 21 connected, but on my side the FTP failed to >> > > > >> >> > connect. >> > > > >> >> > >> > > > >> >> > If I take Windows Firewall off on the W2K3 server, >> > > > >> >> > everything works >> > > > >> >> > fine. >> > > > >> >> > I >> > > > >> >> > think there is no way to make the FTP to work if I have >> > > > >> >> > Windows >> > > > >> >> > Firewall >> > > > >> >> > activated. >> > > > >> >> > >> > > > >> >> > Gary >> > > > >> >> > >> > > > >> >> > "Bernard Cheah [MVP]" wrote: >> > > > >> >> > >> > > > >> >> >> I have R2 without sp2. did you allow ftp services on the >> > > > >> >> >> firewall ?
None- after sp2. everythings work as usual except the known issue - e.g. ASP
session_onend. http://msmvps.com/blogs/bernard/archive/2007/04/14/fix-asp-session-onend-issue-with-w2k3-sp2.aspx For iusr/iwam - I see no errors, my test app still running fine. and my ftp works for local account + anonymous access. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Synapse120" <Synapse120@discussions.microsoft.com> wrote in message news:7609FF90-E358-4418-ABD5-52A3194BE02A@microsoft.com... >I am having similar issues after installing SP2 on my windows 2003 box. > however mine has some slight variations. My FTP will work when i login > using > domain credentials. I lost all ability with anonymous access. This > happens > regardless of the windows firewall settings. > > Do you have anonymous access to your ftp enabled? > > My question is what did microsoft do with the security settings for the > IUSR > and IWAM accounts, are they related? > > MS has done this before with send as persmissions for exchange, so i would > not be surprised. > > Maybe someone out there has some more insight to our problems. > > Thank you, Steve > > "Gary" wrote: > >> Yes, this it is. >> >> If you turn Windows Firewall off on the server, everything works fine. >> maybe >> that is the only way. Shall I give up? (??) >> >> Gary >> >> >> >> "Bernard Cheah [MVP]" wrote: >> >> > Does this happen locally ? >> > >> > let me get sp2 into my test box and test. >> > >> > -- >> > Regards, >> > Bernard Cheah >> > http://www.iis.net/ >> > http://www.iis-resources.com/ >> > http://msmvps.com/blogs/bernard/ >> > >> > >> > "Gary" <Gary@discussions.microsoft.com> wrote in message >> > news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... >> > > Here it is: >> > > >> > > ============ >> > > C:\Documents and Settings\Gary Xu>ftp >> > > ftp> open 172.16.1.3 >> > > Connected to 172.16.1.3. >> > > 220 Microsoft FTP Service >> > > User (172.16.1.3:(none)): hssdomain\xug >> > > Connection closed by remote host. >> > > ftp> >> > > ============ >> > > And I do have inetinfo.exe in the exception list of Windows Firewall >> > > of >> > > the >> > > FTP server. >> > > >> > > Gary >> > > >> > > "Bernard Cheah [MVP]" wrote: >> > > >> > >> Can you post the complete ftp.exe output? >> > >> >> > >> if you have set exception for inetinfo.exe... ftp will works. >> > >> >> > >> -- >> > >> Regards, >> > >> Bernard Cheah >> > >> http://www.iis.net/ >> > >> http://www.iis-resources.com/ >> > >> http://msmvps.com/blogs/bernard/ >> > >> >> > >> >> > >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> > >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... >> > >> >I tried ftp.exe, here is what I did; >> > >> > 1. From DOS screen, enter ftp.exe >> > >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password >> > >> > and I >> > >> > put >> > >> > them in >> > >> > 3. got the message: "Connection closed by remote host". >> > >> > >> > >> > I use WS_FTP client, there is a check box "Passive mode", check >> > >> > that >> > >> > box >> > >> > or >> > >> > uncheck that box, it just doesn't work. After port 21 connected, >> > >> > it try >> > >> > to >> > >> > randomly open higher ports for data transmission, which blocked by >> > >> > Windows >> > >> > Firewall. >> > >> > >> > >> > Gary >> > >> > >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> > >> > >> >> Zzz the same old question again :) >> > >> >> Can you test ftp.exe from remotely? this should works as you have >> > >> >> the >> > >> >> inetinfo.exe exception defined. >> > >> >> >> > >> >> what client you using? does it work in active mode? >> > >> >> >> > >> >> >> > >> >> -- >> > >> >> Regards, >> > >> >> Bernard Cheah >> > >> >> http://www.iis.net/ >> > >> >> http://www.iis-resources.com/ >> > >> >> http://msmvps.com/blogs/bernard/ >> > >> >> >> > >> >> >> > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> > >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... >> > >> >> > Thanks fot the reply. I did everything you mentioned here, I >> > >> >> > even >> > >> >> > added >> > >> >> > one >> > >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. >> > >> >> > Tried >> > >> >> > ftp.exe >> > >> >> > from command line, and got the error message "Connection closed >> > >> >> > by >> > >> >> > remote >> > >> >> > host". When I looked at the remote FTP server "Client Session", >> > >> >> > it >> > >> >> > shows >> > >> >> > that >> > >> >> > port 21 connected, but on my side the FTP failed to connect. >> > >> >> > >> > >> >> > If I take Windows Firewall off on the W2K3 server, everything >> > >> >> > works >> > >> >> > fine. >> > >> >> > I >> > >> >> > think there is no way to make the FTP to work if I have Windows >> > >> >> > Firewall >> > >> >> > activated. >> > >> >> > >> > >> >> > Gary >> > >> >> > >> > >> >> > "Bernard Cheah [MVP]" wrote: >> > >> >> > >> > >> >> >> I have R2 without sp2. did you allow ftp services on the >> > >> >> >> firewall ? >> > >> >> >> Windows Firewall - advanced - network connection - select your >> > >> >> >> connect, >> > >> >> >> click settings, check ftp services.... >> > >> >> >> >> > >> >> >> or have you create an exception for inetinfo.exe ? >> > >> >> >> >> > >> >> >> can you test it out with ftp.exe first? >> > >> >> >> >> > >> >> >> >> > >> >> >> -- >> > >> >> >> Regards, >> > >> >> >> Bernard Cheah >> > >> >> >> http://www.iis.net/ >> > >> >> >> http://www.iis-resources.com/ >> > >> >> >> http://msmvps.com/blogs/bernard/ >> > >> >> >> >> > >> >> >> >> > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message >> > >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... >> > >> >> >> > Hi: >> > >> >> >> > >> > >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP >> > >> >> >> > server >> > >> >> >> > for >> > >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot >> > >> >> >> > connect >> > >> >> >> > FTP >> > >> >> >> > anymore. But if I turn Windows Firewall off on that server, >> > >> >> >> > FTP >> > >> >> >> > works >> > >> >> >> > fine. >> > >> >> >> > How can I turn Firewall on and make FTP to work. I am using >> > >> >> >> > WS_FTP. >> > >> >> >> > Thanks. >> > >> >> >> >> > >> >> >> >> > >> >> >> >> > >> >> >> > >> >> >> > >> >> >> > >> >> > >> >> > >> >> > >> > >> >
OK! Found the reason. The DELL server has Dual Broadcom NetXtream NIC and I
only connected one with static IP. But in Windows Firewall/Advanced tab, both network cards are checked even exception list is the same for both. As soon as I uncheck the one not in use, everything works fine! Thanks Bernard for your patience. Gary [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> ²»Ó÷ÅÆú¡£ > > I just tested with SP2, and I'm can't repro what you claim. > I have firewall on + inetinfo.exe defined in the exception list, > and I'm able to connect from another Vista client machine via command line > tool - ftp.exe > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Gary" <Gary@discussions.microsoft.com> wrote in message > news:FB8F89C7-881E-4844-B577-0F9B273DE83D@microsoft.com... > > Yes, this it is. > > > > If you turn Windows Firewall off on the server, everything works fine. > > maybe > > that is the only way. Shall I give up? （æâ€Â¾Ã¥Â¼Æ’） > > > > Gary > > > > > > > > "Bernard Cheah [MVP]" wrote: > > > >> Does this happen locally ? > >> > >> let me get sp2 into my test box and test. > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis.net/ > >> http://www.iis-resources.com/ > >> http://msmvps.com/blogs/bernard/ > >> > >> > >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> news:48D5A423-C5D8-46FB-947D-CB586C4F9A64@microsoft.com... > >> > Here it is: > >> > > >> > ============ > >> > C:\Documents and Settings\Gary Xu>ftp > >> > ftp> open 172.16.1.3 > >> > Connected to 172.16.1.3. > >> > 220 Microsoft FTP Service > >> > User (172.16.1.3:(none)): hssdomain\xug > >> > Connection closed by remote host. > >> > ftp> > >> > ============ > >> > And I do have inetinfo.exe in the exception list of Windows Firewall of > >> > the > >> > FTP server. > >> > > >> > Gary > >> > > >> > "Bernard Cheah [MVP]" wrote: > >> > > >> >> Can you post the complete ftp.exe output? > >> >> > >> >> if you have set exception for inetinfo.exe... ftp will works. > >> >> > >> >> -- > >> >> Regards, > >> >> Bernard Cheah > >> >> http://www.iis.net/ > >> >> http://www.iis-resources.com/ > >> >> http://msmvps.com/blogs/bernard/ > >> >> > >> >> > >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> news:B4BD8FDB-0658-4125-BC4C-85AC3913C81D@microsoft.com... > >> >> >I tried ftp.exe, here is what I did; > >> >> > 1. From DOS screen, enter ftp.exe > >> >> > 2. ftp>open 172.16.1.3, got the prompt for user ID and password and > >> >> > I > >> >> > put > >> >> > them in > >> >> > 3. got the message: "Connection closed by remote host". > >> >> > > >> >> > I use WS_FTP client, there is a check box "Passive mode", check that > >> >> > box > >> >> > or > >> >> > uncheck that box, it just doesn't work. After port 21 connected, it > >> >> > try > >> >> > to > >> >> > randomly open higher ports for data transmission, which blocked by > >> >> > Windows > >> >> > Firewall. > >> >> > > >> >> > Gary > >> >> > > >> >> > "Bernard Cheah [MVP]" wrote: > >> >> > > >> >> >> Zzz the same old question again :) > >> >> >> Can you test ftp.exe from remotely? this should works as you have > >> >> >> the > >> >> >> inetinfo.exe exception defined. > >> >> >> > >> >> >> what client you using? does it work in active mode? > >> >> >> > >> >> >> > >> >> >> -- > >> >> >> Regards, > >> >> >> Bernard Cheah > >> >> >> http://www.iis.net/ > >> >> >> http://www.iis-resources.com/ > >> >> >> http://msmvps.com/blogs/bernard/ > >> >> >> > >> >> >> > >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> >> news:3602DA3E-2F63-4950-9264-0EF2B2D50A9A@microsoft.com... > >> >> >> > Thanks fot the reply. I did everything you mentioned here, I even > >> >> >> > added > >> >> >> > one > >> >> >> > to allow TCP port 20 as well. Added inetinfo.exe as exception. > >> >> >> > Tried > >> >> >> > ftp.exe > >> >> >> > from command line, and got the error message "Connection closed > >> >> >> > by > >> >> >> > remote > >> >> >> > host". When I looked at the remote FTP server "Client Session", > >> >> >> > it > >> >> >> > shows > >> >> >> > that > >> >> >> > port 21 connected, but on my side the FTP failed to connect. > >> >> >> > > >> >> >> > If I take Windows Firewall off on the W2K3 server, everything > >> >> >> > works > >> >> >> > fine. > >> >> >> > I > >> >> >> > think there is no way to make the FTP to work if I have Windows > >> >> >> > Firewall > >> >> >> > activated. > >> >> >> > > >> >> >> > Gary > >> >> >> > > >> >> >> > "Bernard Cheah [MVP]" wrote: > >> >> >> > > >> >> >> >> I have R2 without sp2. did you allow ftp services on the > >> >> >> >> firewall ? > >> >> >> >> Windows Firewall - advanced - network connection - select your > >> >> >> >> connect, > >> >> >> >> click settings, check ftp services.... > >> >> >> >> > >> >> >> >> or have you create an exception for inetinfo.exe ? > >> >> >> >> > >> >> >> >> can you test it out with ftp.exe first? > >> >> >> >> > >> >> >> >> > >> >> >> >> -- > >> >> >> >> Regards, > >> >> >> >> Bernard Cheah > >> >> >> >> http://www.iis.net/ > >> >> >> >> http://www.iis-resources.com/ > >> >> >> >> http://msmvps.com/blogs/bernard/ > >> >> >> >> > >> >> >> >> > >> >> >> >> "Gary" <Gary@discussions.microsoft.com> wrote in message > >> >> >> >> news:CBA63621-6FE8-4F61-AFB4-4C5061256600@microsoft.com... > >> >> >> >> > Hi: > >> >> >> >> > > >> >> >> >> > I installed a Windows W2K3 R2 64bit server and enabled FTP > >> >> >> >> > server > >> >> >> >> > for > >> >> >> >> > internal use. After I installed SP2 on W2K3 server, I cannot > >> >> >> >> > connect > >> >> >> >> > FTP > >> >> >> >> > anymore. But if I turn Windows Firewall off on that server, > >> >> >> >> > FTP > >> >> >> >> > works > >> >> >> >> > fine. > >> >> >> >> > How can I turn Firewall on and make FTP to work. I am using > >> >> >> >> > WS_FTP. > >> >> >> >> > Thanks. > >> >> >> >> > >> >> >> >> > >> >> >> >> > >> >> >> > >> >> >> > >> >> >> > >> >> > >> >> > >> >> > >> > >> > >> > >
Woh... that would take a year to figure out. it should not connect at all, that's the part I can't figure why. it shows you the login prompt, and only close the connection after that....... wtf ???? anyway, glad you found it. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Gary" <Gary@discussions.microsoft.com> wrote in message news:E |