Differences

This shows you the differences between two versions of the page.

--- networking:windows:windows_ftp_server [2017/09/13 12:22]
gcooper
+++ networking:windows:windows_ftp_server [2017/09/13 16:40] (current)
gcooper
@@ Line 1: / Line 1: @@
-====== Windows FTP Server ======
+====== FileZilla FTP Server for Windows ======
 The built-in FTP service for Windows is part of the IIS web server and is quite complicated to set up and get working for many applications.
@@ Line 5: / Line 5: @@
 We generally use the free FileZilla Server for Windows FTP server requirements.
-===== FileZilla =====
+==== Add a FileZilla FTP User ====
+As an administrator, on the FileZilla server:
+  - Create a **FTP home directory** for the new user
+    * Probably a sub-directory of your main FTP top-level share
+    * ex: ''E:\Shares\FTP\jdoe''
+  - Open the **FileZilla Server Interface** on your server
+  - **Edit -> Users -> Add**
+  - Define account settings
+  - Add the shared folder (FTP home directory)
+  - Set permissions to the shared folder
+{{:networking:windows:fz_new_user_1_create_home_dir.png?450 |Create FTP User Home Dir}} {{ :networking:windows:fz_new_user_2_open_server_iface.png?300 |FileZilla Server Interface}} {{ :networking:windows:fz_new_user_3_add_user.png?600 |Add a User}} {{ :networking:windows:fz_new_user_4_user_name.png?300 |Name the User}} {{ :networking:windows:fz_new_user_5_user_settings.png?600 |User Settings}} {{ :networking:windows:fz_new_user_6_user_folders.png?600 |User Folders}} {{ :networking:windows:fz_new_user_7_user_select_home_folder.png?300 |Select the Home Dir Created Earlier}} {{ :networking:windows:fz_new_user_8_user_home_perms.png?600 |Home Folder Permissions}} {{ :networking:windows:fz_new_user_9_winscp_connected_ftp.png?750 |Connected!}}
+===== FileZilla Server =====
 The FileZilla Server supports:
-  * Unencrypted (normal) FTP
+  * Unencrypted (normal) **FTP**
-  * FTP over TLS (FTPS), including
+  * FTP over TLS (**FTPS**), including
-    * Explicit on port 21
+    * **Explicit** on port 21
-    * Implicit on prt 990
+    * **Implicit** on port 990
-However, the FileZilla Server does **not** support SFTP (SCP/SSH)
+However, FileZilla Server does **not** support **SFTP** (SCP/SSH)
 ==== Server Installation ====
   - Create a dedicated ''filezilla'' user account to run the FileZilla server process
-  - Make the ''filezilla'' user a member of the ''Administrators'' group
+    * Member of the ''Administrators'' group
+    * Password never expires
   - Download and install the latest FileZilla Server version
+    * https://wiki.filezilla-project.org/FileZilla_FTP_Server
   - Modify the ''FileZilla Server'' service (Log On tab) to run as the ''filezilla'' user
+    * ''services.msc''
+  - Configure ''Passive Mode settings''
+    * Specify a range of ports (5000-5010 used here)
+  - Configure FTPS (TLS) security with a self-signed certificate
+    * ''FTP over TLS settings''
+    * ''Generate a new certificate''
   - Modify the Windows firewall to permit FTP traffic
-  - Configure ''Passive mode'' settings
+    * Add a rule named ''FTP Ports''
-  - Configure FTPS (TLS) security
+    * TCP ports 21 and 990
+    * Also add the Passive Mode port range you define (5000-5010 used here)
+  - In your external firewall, forward all the same ports in to the FileZilla Server
+{{ :networking:windows:fz_server_2_firewall_rule.png?400|Firewall Rule Details}}
+{{:networking:windows:fz_server_1_firewall_rule.png?400 |Add a Windows Firewall Rule}}
-==== Add a FileZilla FTP User ====
+{{ :networking:windows:fz_server_3_passive_mode_settings.png?600 |Passive Mode Settings}}
+{{ :networking:windows:fz_server_4_ftp_over_tls_settings.png?600 |FTP Over TLS Settings}}
-As an administrator, on the FileZilla server:
+===== Troubleshooting =====
-  - Create a **FTP home directory** for the new user
+==== Home directory does not exist ====
-    * Probably a sub-directory of your main FTP top-level share
-    * ex: ''E:\Shares\FTP\jdoe''
-  - Open the **FileZilla Server Interface** on your server
-  - **Edit Users**
-  -
-clients get the **error** ''Home directory does not exist''.
+Make sure the FileZilla Server process is running under a user with administrative permissions.  We add the ''filezilla'' user to the ''Administrators'' group.

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools