Setting up an ftp account

[Kalisto]

Ive just inherited a dedicated root level win2003 server from a customer.

Its a brand new build, with iis6

Ive set up what I believe to be an ftp account, but I cant connect.

Can someone point me to a resource for setting one up, or tell me whats missing from this list?

1) Set up New ftp site (Default ftp is still there)
2) Gave the site a unique name (that relates to my domain)
3) Gave the new site an ftp address
4) Set the site up to use port 21
5) Set up Anonymous security
6) Gave the anonymous security a name that makes more sense than IUSR_xxx
7) Gave the security a new password.

I cannot connect to this account from my local PC (But I can connect to other servers, so my PC is ok)

I then tried to connect to ftp via the admin account and password.

Again, no dice.

Windows Firewall is off

Ive no server admin experience since an early novell job *cough* years ago, so if Ive missed out something really obvious then feel free to tell me.

Ive looked at the help in IIS and can't see anything that Ive missed.

Any pointers / help greatfully received

Cheers


K

 

[GVN]

Is there a physical firewall device between you and the ftp server? If so, make sure both ports 20 and 21 are opened up.

Also, can you ftp into the server from that SAM server itself? You should be able to... If not, the problem reside within the ftp config on the box itself.

Let us know your results please,

GVN

 

[GVN]

FYI: (IANA port numbers

http://www.iana.org/assignments/port-numbers)

ftp-data 20/tcp File Transfer [Default Data]
ftp-data 20/udp File Transfer [Default Data]
ftp 21/tcp File Transfer [Control]
ftp 21/udp File Transfer [Control]


Hope this helps.

 

[Kalisto]

Ok, like I said Im a novice at server stuff.

Are you asking me to install some ftp software onto the server, and ftp to it'sself?.

If so, running ftp from the command line, I get Cannot log in, Home directory inaccessible

That give you any clues?

 

[blakey2]

Have you set up the dns records properly? If you have not set them then you won't ever be able to 'reach' the ftp server.

What happens if you try the internal IP address of the server into your ftp program?

Which error messages are you receiving?

Cheers.

 

[SQLHacker]

Kalisto,

I noticed that you renamed the default "internet guest" account in IIS. Did you disable the default "IUSR_[machine-name]"? If not, it comes back.

Also, I tried renaming the IUSR account, and it was more trouble than it was worth (and didn't provide the kind of security I was hoping for). I found it much more effective to limit the default account to have read access on all local machine and (if necessary) network paths.

You may want to delete the IUSR account, and let it "respawn", and then see if you can access the FTP site.

 

[Kalisto]

Blakey2
If I rdp in, and then run cmd, ftp
I can type in the root user name, and it asks for the password.
When I then type the password in, I get error "530 user <> cannot login. home directory inaccessible"

The inetpub\ftp folder has everyone with read / write permissions at present, and no joy.

SQLHacker, Ive given up with specific accounts, Im trying to just get the admin to work first!

Cheers

K

 

[blakey2]

Hi kalisto,

Sounds to me as though the problem lies with permissions, however you might still want to ensure that you do have appropriate DNS entries in place.

Easy way to check your dns is to ping the ftp sitename you created. If it resolves to the internal IP of your ftp server then no worries there.

If you require external ftp access then you would need to update external DNS records and check with

http://www.dnsstuff.com

Can't help really on permisisons as I tend to use open source for web/ftp servers etc.

Cheers.

 

[Kalisto]

The dns stuff is ok, Im getting error 13 in the log.

Hmm, more suggestions? Help? Sympathy? lol