Windows Server 2008, IIS7, firewalls and FTP
September 16, 2010 § Leave a comment
I was trying to set up FTP access to a test box for a developer yesterday. Installing FTP using Server Manager was straightforward, as was setting up the FTP site. It took me a while to figure out how to allow access through the firewall, though.
I finally found this article by Matt Williamson that gave me enough information to get it working.
This article goes into more detail about configuring it, including this blurb explaining why allowing svchost.exe to get through the firewall makes FTP accessible, even if it’s perhaps not the best option.
The easiest way to configure Windows Firewall to allow FTPS traffic is to list the FTP service on the inbound exception list. The full service name is the “Microsoft FTP Service”, and the short service name is “ftpsvc”. (The FTP service is hosted in a generic service process host (Svchost.exe) so it is not possible to put it on the exception list though a program exception.)