FTP connection settings file. How to use FileZilla - step by step instructions

In fact, you only need to enter the selected host name, in this case - myhost8.ddns.net. There is no need to change any other parameters. Then you need to download and install special software - Dynamic Update Client(DUC), the link to which is located on the main page of the site. After the installation of DUC is completed, it will launch and an authorization window will open, where you need to enter the username or E-mail and password received when registering on the no-ip.org website. Then press the button Edit Hosta and check the box next to the previously created host name (myhost8.ddns.net). Now, the selected host name will always correspond to the “white IP address” of your Internet connection. If you are having trouble updating your IP address, check to see if your DUC client's network activity is being blocked by a firewall.

Setting up an FTP server

    Using non-standard port numbers for an FTP server is not at all necessary if the provider does not use traffic filtering, or you do not care about scanning ports for vulnerabilities and trying to guess passwords. In this article, the use of an FTP server with non-standard TCP ports is presented as one of the possible options.

FileZilla Server settings are made through the "Edit" - "Settings" menu

Window General Settings intended for general FTP server settings.

In the "Listen on this port" field you can specify the port number for incoming TCP connections. By default, this field is set to 21 , and to use a non-standard number you need to specify the selected value, for example - 12321 . Using a non-standard TCP port has some inconvenience, since it requires specifying its value when creating a session:

If the server is planned to be used both with access from the Internet and on the local network, it makes sense to leave the standard value 21, and use a non-standard port number for connections from the Internet, setting up redirection of packets arriving on port 12321 of the router to port 21 of the FTP server in local network. With this setup, there is no need to specify a port number for FTP sessions within the local network.

Other parameters are for tuning performance and session timeouts. They can be left unchanged. The remaining sections of general settings can also be left as default:

Welcome Message- text that is sent to the client upon connection.

IP Binding- on which network interface client connections will be expected. By default - on any, but you can specify a specific one, for example - 192.168.1.3.

IP Filter- setting up filtering rules for client IP addresses. By default, connections are allowed for any IP.

Chapter Passive mode settings serves to configure passive FTP mode and will require changing almost all default parameters.

The port numbers that will be used to transmit data in passive mode must be set manually, since the router will need to be configured to redirect it to the network interface that the server is listening to. Therefore, you need to check the box to enable the "Use custom port range" mode and set the range - for example, from 50000 before 50020 . The number of ports the server listens to determines the limit on the number of simultaneous data transfer sessions.

Subsection IPv4 specific defines the IP address that will be sent by the server in response to the PASV command. In this case, it should not be the server’s own IP 192.168.1.3, but the “white IP” of our Internet connection. Therefore, you need to set the “Use the following IP” mode and instead of the IP address, enter the name received when registering with the dynamic DNS service - myhost8.ddns.net. As an alternative, you can use the mode for determining the external IP address using the FileZilla project by turning on. "Retrieve external IP Address from:". This option can be selected in cases where it is not possible to use the dynamic DNS tool. If you intend to use an FTP server on your local network, you need to set the mode to "Don"t use external IP for local connections" (do not use an external IP address for connections within the local network)

The rest of the server settings can be left unchanged or, if necessary, performed later: Security settings- Security Settings. By default, connections that can be used to implement DDoS attacks are prohibited

Miscellaneous- settings for buffer sizes and other log parameters and some FTP commands.

Admin Interface settings- server control panel settings. You can specify the network interface, listening port number, IP addresses from which connections to the control panel are allowed, and a password.

Logging- server event log settings. By default, writing to the file is not performed.

Speed ​​Limit- data transfer rate limit settings. By default - no restrictions.

Filetransfer compression- settings for file compression during transfer. The default is no compression.

SSL/TLS settings enabling encryption mode for transmitted data. The default is no encryption.

Autoban- enable automatic blocking of users who guess the password to connect. By default, automatic blocking is disabled.

Setting up port forwarding and firewall

In order for the FTP server to be accessible from the Internet, it is necessary to configure the router so that incoming connections coming to certain TCP ports on the external interface are redirected to the TCP ports listened to by the FTP server on the internal network. For different router models, the settings may differ in terminology, but their meaning is the same - a TCP packet with a specific port number received on the external (WAN) interface is sent to the local network to the desired IP address and port. Example of settings for the D-Link DIR-320NRU router for port forwarding used for passive FTP mode:

Packets received on an interface with a "white IP" and having port numbers in the range 50000-50020 will be redirected to the IP address specified in the "Internal IP" field (in our case - 192.168.1.3). Similarly, a redirection is created for port 50021 if you changed the standard port number, or to port 21 of the FTP server if you left it unchanged.

After applying these settings, the FTP server will be accessible via URL ftp://myhost8.ddns.net:50021 or, for a connection within a local network:

ftp://192.168.1.3- if you did not change the default port number (21) in the FTP server settings.

ftp://192.168.1.3:50021- if a non-standard port number is used.

You can use a computer name instead of an IP address if it can be resolved to an IP address

ftp://comp1

ftp://comp1.mydomain.ru

Diagnosis of problems

If the connection to the FTP server does not occur, then there may be problems with the firewall blocking the connections necessary for the operation of the created FTP server. If you use the built-in Windows firewall, you must add a rule that allows network activity for the "FileZilla FTP server" service. If you are using a third-party firewall or antivirus with traffic filtering, you must create a corresponding rule using the available settings tools to allow network connections. Options are possible when settings are made to allow any network activity of a specific program, or to allow selected addresses and ports that apply to all programs.

The best place to start diagnostics is on the FTP server itself. As a diagnostic tool, you can use a standard telnet client(utility telnet.exe) . All firewalls do not block connections on the loopback interface, and to check that the server settings are correct, you can connect to it by entering the command:

telnet localhost 21- if a standard port number is used.

telnet localhost 50021- if the standard port number has been changed.

When this command is executed, a connection to the FTP server is made via the loopback interface and a server invitation (Welcome Message) should be displayed in the telnet window. If this does not happen, the server may be stopped, there is a port conflict, or port 21 (50021) is not listening. For diagnostics you can use the command netstat:

netstat –nab

The command line options mean:

n- use numeric port numbers and IP addresses

a- display all connections and listening ports

b- display the names of programs involved in creating connections.

Example of displayed command results:

Active connections

Name     Local address     External address     Status
TCP         0.0.0.0:21                 0.0.0.0:0                 LISTENING
TCP         0.0.0.0:135               0.0.0.0:0                 LISTENING
RpcSs

In a collumn Local address there is a meaning 0.0.0.0:21 , which indicates that the program named FileZilla Server.exe listening (state LISTENING) TCP port number 21 on all network interfaces. If a specific interface and a different port number were specified in the FTP server settings, then this value will contain IP:port, For example - 192.168.1.3:50021

To display results in page mode, you can use the command:

netstat -nab | more

Or use search results by port number: netstat -nab | find ":21"

If the server is unavailable on a non-loopback interface, but accessible on a loopback interface, you need to understand the firewall settings.

Setting up users and groups.

Setting up users and groups is done through the menu "Edit" - "Users" ("Groups"). It is not necessary to create groups, but sometimes it is convenient in cases where there are a large number of users and their rights in relation to the FTP server differ. The settings for both groups and users are almost identical:

This example shows the result of adding an FTP server user named user1 having full rights to write, read, delete and merge files, as well as to view the contents, delete and create subdirectories in the directory C:\ftp\public

On the page General user properties are added, deleted, and changed.
On the page Shared Folders settings are made that determine the list of file system directories that will be used by the FTP server to provide access to them via the FTP protocol. Each user or group of users can be given their own directory with certain rights in relation to its contents.
On the page Speed ​​limits You can set restrictions on data exchange speed.
On the page IP Filter You can set filtering rules for the user's IP address, indicating the addresses from which connection to the server is prohibited or allowed.

List of basic FTP commands

ABOR - Abort file transfer
CDUP - Change directory to a higher one.
CWD - Change current directory.
DELE - Delete a file (DELE filename).
HELP - Displays a list of commands accepted by the server.
LIST - Returns a list of files in a directory. The list is transmitted via the data connection (port 20).
MDTM - Returns the file modification time.
MKD - Create a directory.
NLST - Returns a list of files in a directory in a shorter format than LIST. The list is transmitted via the data connection (port 20).
NOOP - Empty operation
PASV - Enter passive mode. The server will return the address and port to which you need to connect to collect the data. The transfer will begin when the RETR, LIST, etc. commands are entered.
PORT - Enter active mode. For example PORT 12,34,45,56,78,89. Unlike the passive mode, the server itself connects to the client to transfer data.
PWD - Returns the current server directory.
QUIT - Disconnect
REIN - Reinitialize connection
RETR - Download file. RETR must be preceded by a PASV or PORT command.
RMD - Delete directory
RNFR and RNTO - Rename the file. RNFR - what to rename, RNTO - what to rename.
SIZE - Returns the file size
STOR - Upload a file to the server. STOR must be preceded by a PASV or PORT command.
SYST - Returns the system type (UNIX, WIN,)
TYPE - Set the file transfer type (A - ASCII text, I - binary)
USER - Username to log into the server

Example FTP session

FTP client connects to server with username user1, an empty password and downloads a file named cpu-v. Messages from the FTP server are highlighted in red, messages from the FTP client are highlighted in blue. The exchange of directives and parameters may vary slightly between different versions of the FTP client and FTP server software.

After connecting, the server transmits information about itself to the client:
220-FileZilla Server version 0.9.45 beta
220-written by Tim Kosse ( [email protected])
220 Please visit http://sourceforge.net/projects/filezilla/
The client passes the username:
USER user1
The server asks for a password:
331 Password required for user1
The client passes an empty password:
PASS
The server verifies the user account and reports the start of the session:
230 Logged on
The client requests the type of operating system on the server:
SYST
The server reports that the type Unix, emulated by Filezilla server:
215 UNIX emulated by FileZilla
The client requests a list of parameters supported by the server:
FEAT
The server responds with a list of supported parameters:
211-Features:
MDTM
REST STREAM
SIZE
MLST type*;size*;modify*;
MLSD
UTF8
CLNT
MFMT
211 End
The client requests the current directory of the server:
P.W.D.
The server reports that the current directory is the root directory ("/"):
257 "/" is current directory.
The client reports that it will transfer binary data:
TYPE I
The server confirms the type of data being transferred:
200 Type set to I
The client reports that it will use passive FTP mode:
PASV
The server reports the transition to passive mode and transmits the IP and port for passive FTP mode.
227 Entering Passive Mode (212,248,22,114,195,97)
The client requests to receive a file named cpu-v from the current server directory
RETR cpu-v
The server reports the start of data transfer:
150 Opening data channel for file download from server of "/cpu-v"
Upon completion, the server reports a successful transfer:
226 Successfully transferred "/cpu-v"

In conclusion, I would like to add that the Filezilla project includes not only the development and support of a high-quality free FTP server, but also a popular free FTP client

An article with a brief description of a free FTP client for Linux, Mac OS and Windows. This FTP client supports many application data transfer protocols - FTP, FTP over SSL/TLS (FTPS), SSH File Transfer Protocol (SFTP), HTTP, SOCKS and FTP-Proxy. In other words, Filezilla FTP Client is a universal software for receiving and transferring files over all modern application protocols between nodes on various platforms.

In this article we will talk about the following things:

1. how to set up an FTP server on a computer connected to the router;
2. how to provide access to it from the World Wide Web.

Setting up the FTP server program

Installing FileZilla Server

Download and install any FTP server that you like or are used to working with. For example, we will download a free program Filezilla Server from the official website: https://filezilla-project.org/download.php?type=server

Run the downloaded installation file:

Click I reject:

Click I reject again:

Click Install:

Click I agree:

Next:

Install:

Setting up a FileZilla FTP server

Launch the program interface.

Enter settings: menu Edit -> Settings:

Now you need to configure passive FTP mode.

1) Select a section Passive mode settings;

2) Check the box Use custom port range;

3) Set a convenient range of ports for use in passive mode;

4) In the field Use the following IP enter your external IP;

5) Click the button OK to save settings.

Now you need to set up user accounts and specify home directories.

Enter the menu Edit and select Users:

In chapter General click Add:

Enter your username and click OK:

1) Check the box next to Password. This will indicate that this account will require a password.

2) Set a password for this account;

3) Go to section Shared folders:

In chapter Shared folders click Add:

and select the folder that will be open to this user for access via FTP. After selecting the shared folder, click OK:

Set permissions for this user on the folder.

In area Files You can allow or disable the following file operations:

• Reading;
• Record;
• Delete;
• Change.

In area Folders You can allow or deny the following folder operations:

• Creation;
• Delete;
• View list;
• View subfolders.

Once you have set permissions for this user in the current folder, click OK to save settings:

Computer settings

After setting up the FTP server program itself, you need to allow incoming connections in the firewall.

Let's go to Control Panel and choose Windows Firewall.

Right-click on Rules for incoming connections and choose Create a rule:

Choose an option For the program and press Further:

Set the switch to position Program path and using the button Review specify the path to the file FileZilla Server.exe.
Then, click Further:

Select an option Allow connection and press Further:

Give the rule a custom name and click Ready:

Setting up a router: creating port forwarding rules

Now we need to create port forwarding on the gateway. The gateway can be a router, modem, or other device. Log in to the router’s web interface (read the article about what a web interface is and how to access it:) and open the port forwarding section. Read more about port forwarding in our article: What is port forwarding.

Create two rules.

Rule No. 1: forward external port 21 to port 21 of the computer where the FTP server program is installed.

Rule No. 2: forward a range of ports to the same range of ports on a computer with the FTP server program installed.

Saving the setting.

How to remotely connect to an FTP server

To access the FTP server, you can use either an FTP client, a browser, or even Explorer. Of course, it is preferable to use an FTP client. We recommend the free program FileZilla client. You can download it on the official website: https://filezilla-project.org/download.php?type=client

In field Host enter either ) or the external IP address of the router. Then, enter the username you created in the FileZilla Server program on your computer, the corresponding password and click the button Fast connection:

If in port forwarding in the router settings you did not change port No. 21 to non-standard, then the field Port You can leave it empty - the program will connect to port 21 by default.

Most often, users use email or Skype to exchange small files online. However, when you need to send an archive of photographs or a film several gigabytes in size, these services cannot be used. Public file sharing also creates some difficulties, for example, waiting for a timer and limiting the speed. The best solution in this case is to create your own FTP server.

FTP (File Transfer Protocol) is a protocol for transferring information on the Internet and local computer networks. This is a program that makes a remote connection to a dedicated folder for viewing and sharing files, including large ones. Data exchange is possible from a computer to a remote server and between other FTP servers.

Data is transmitted without traffic encryption, so attackers can easily gain access to logins and passwords. For secure file transfer, it is recommended to use a TLS-protected protocol - FTPS, which encrypts data.

Your own FTP server has certain advantages:

• allows you to manage the server and its resources;
• provide users with different access rights;
• it does not require a static IP address.
• no speed limits;
• lack of payment to the hoster for hosting it;

The software is selected according to the complexity of the access. To create an FTP server for private use with minimal settings, free software packages are quite suitable.

Microsoft has added Internet Information Services (IIS) to Windows 7, which allows users to share access to a folder from the network. Therefore, to create an FTP server for Windows 7, you do not need to install any additional software.

Installing an FTP server

Some standard features that are not used very often are disabled by default in Windows 7. Therefore, in order to activate them, you need to follow a number of steps.

To create an FTP server on Windows 7 you need to:

• Click “Start” and open the “Control Panel” section. For ease of viewing, you can select the “Small icons” mode.

• Go to the "Programs and Features" section, where you select "Turn Windows features on or off."

• In the list of the menu that opens, you need to select the components that should be activated by checking the box next to them. This is the “FTP Server” folder, there are two items in it: “FTP Extensibility” and “FTP Service”, as well as the “Website Management Tools” folder, and in it is the “IIS Management Console”. To start, click OK.

Setting up an FTP server

1. Now you need to go through “Start” to “Control Panel” again.
2. Find the “Administration” section and open “IIS Services Manager” in this section.
3. Go to the “Sites” tab, right-click on the name, select “Add FTP sites” from the list.
4. In the new window you need to specify the name of the future FTP server and the path to the directory with its data. You can proceed to the next configuration step by clicking the “Next” button.
5. Now the server parameters are set. In the IP address field, select the one you need from the list. You can bind it to a specific address or make extended access by selecting “All free”. In this case, the standard port 21 should be checked. If you plan to constantly use the FTP server, then you should check the “Launch FTP site automatically” checkbox. Select the “No SSL” option; you can enable it later if necessary. Click “Next” again.
6. In a new window, the authorization type is specified. In the “Authentication” item, you can allow login for regular or anonymous users. Here you can configure rights for them. Click "Done".

After the installation is complete, a new FTP server will appear in the “Sites” section.

Setting up Windows Firewall

Now it is imperative to configure the Windows Firewall to open ports and allow services to function.

Go back to Control Panel, then Windows Firewall. Find the "Advanced Settings" section.

In it, select “Rules for incoming connections”. It is recommended to set them to passive mode. To do this, right-click and enable the “FTP Server Passive” and “FTP Server (incoming traffic)” rules. In the same way, for outgoing connections, enable the “FTP-Server” rule in the appropriate section.

Connecting users

In order for users to access the server, they must be connected.

• In the “Control Panel” tab, open the “Administration” folder.

Administration section

• Find the Computer Management section, then go to the Local Users folder. Right-click on the “Groups” line and select the “Create Group” function. In the new window, specify the name and short description of the group and click “Create”.
• Now you can connect users to the created group. In the “Local Users” folder, right-click on the “Users” line and select “New” from the menu list. Fill in the fields by entering your name and password, and here you should check the box to prohibit changing the password.
• To connect a user, right-click on his account and select “Properties” from the menu list, then the “Group Membership” tab and the “Add” button. Find the created group, add and click OK. This procedure must be performed for all server users.
• The next step is to determine the access rights of group users to the working directory. To do this, go to the “Site” directory, right-click on the name and open “Properties”. Next - the “Security” tab, in the “Change” item, specify the name of the group and click OK. Then you need to configure user rights.
• Enter the “IIS Services Manager”, right-click on the line “FTP Authorization Rules”, add an allowing rule. You can allow users to write and delete data, or you can only read.

Server installation and configuration is complete. However, now you need to know how to log into the FTP server.

Standard Windows features make this easy. Just open the “My Computer” folder, then specify the path to the server in the address bar.

Another way is to create a shortcut for connecting to FTP on your computer desktop.

To do this, open the “Control Panel”, right-click the “Network Neighborhood” section. In tasks, select “Add a new element to the network environment”, then click on “Select another network location” and “Next”. Now a shortcut will appear in the “Network Location” section, which you just need to drag and drop onto your desktop.

As you can see, it is useful to know how to set up an FTP server to make data exchange between users convenient and without restrictions.