How to enable FTP Passive Mode for Amazon EC2 server with IIS

iis amazon-ec2 ftp passive-mode
Kalel Wade picture Kalel Wade · Oct 20, 2014 · Viewed 9.4k times · Source

I originally had the issue when using pagelime which required users to use passive mode and did not support active mode. Getting active mode to work was pretty straight forward but getting passive to work took a lot more effort.

I am using a Amazon EC2 server with IIS as well as a FTP Site.

Answer

Kalel Wade picture Kalel Wade · Oct 20, 2014

The following link is what finally solved it for me. I will highlight some of the main things below in case the link stops working.

https://forums.aws.amazon.com/thread.jspa?threadID=98905

  1. In IIS, highlight the top-level server (not the FTP site). Click FTP Firewall Support. Under Data Channel Port Range, set a small range, e.g. 41000-41099. Under External IP Address to your Elastic IP Address. Enabling 49152-65535 will work as well but is probably less secure due to the greater number of ports opened.

enter image description here enter image description here enter image description here

  1. Open the Windows firewall for the ftpsvc. Disable the StatefulFtp global setting:

netsh advfirewall firewall add rule name=FTP_Service action=allow service=ftpsvc protocol=TCP dir=in

netsh advfirewall set global StatefulFTP disable

enter image description here

  1. From an administrative command prompt, restart the Microsoft FTP Service to make sure all the changes take effect:

net stop ftpsvc

net start ftpsvc

  1. Open the corresponding 100 ports, e.g. 21 and 41000-41099, in your EC2 Security Group. Or 49152-65535 if you go that route. enter image description here enter image description here

Related questions

Can't get my EC2 Windows Server 2008 (Web stack) instance to receive publishings of my website

I installed a fresh AMI for EC2 (http://aws.amazon.com/amis/Microsoft/5147732567196848) and have installed Web deploy 2.1 on it. The web deploy 2.1 service is running for real as netstat -an Shows 8172 is being listened on by the Web Deployment …

Read More
Config Error: This configuration section cannot be used at this path

I've encountered an error deploying a site to a server. When trying to load the home page, or access authentication on the new site in IIS, I get the error: Config Error: This configuration section cannot be used at this …

Read More
How to create .pfx file from certificate and private key?

I need .pfx file to install https on website on IIS. I have two separate files: certificate (.cer or pem) and private key (.crt) but IIS accepts only .pfx files. I obviously installed certificate and it is available in certificate …

Read More