Editing Talk:Network Configuration (section)

== Previous discussions ==

I added the section on how to set up FileZilla Server under Vista and Windows Firewall.  I'm not sure if I put it in the right place or formatted it correctly.

I spent a few hours trying to figure this out and I've found that a lot of people have this same problem.  Windows Firewall does not easily allow you to add FileZilla Server since it is a service and not an application, it only (by default) gives you the option to add the interface (which doesn't help in getting people to connect to your server).  I'm not sure if this information applies to any other version of Windows Firewall as I have only tried it in Vista.

-Ashsagoon  10/16/2007

:It would be FAR easier to just disable the useless Windows firewall. All problems solved. --[[User:CodeSquid|CodeSquid]] 10:52, 16 October 2007 (CEST)

::I agree, however there are people out there who insist on having it.  Also there are people who don't know much about PCs and don't like it when that stupid icon pops up and warns them that it's disabled and their pc could be in danger (this was my problem, setting up an ftp on an inexperienced user's pc).  Doesn't hurt to have the instructions I hope :) --[[User:Ashsagoon|Ashsagoon]] 07:10, 17 October 2007 (CEST)


"The availability and openess of the internet also attracted malicious users who are actively exploiting design flaws, bugs and the inexperience of other users. A well known software company located in Redmond certainly played a part in this"<br>
- How typical. I'm sick of people blaming any and all security issues on Microsoft. The only reason more flaws are discovered in Windows is because it is targeted more.[[User:203.122.246.191|203.122.246.191]] 05:06, 15 February 2008 (CET)

"It would be FAR easier to just disable the useless Windows firewall. All problems solved."<br>
-And again. The Windows firewall is not useless. There are better solutions out there, but stop blaming all your problems on Microsoft.[[User:203.122.246.191|203.122.246.191]] 05:06, 15 February 2008 (CET)

-khammond 11/13/2008

:Updated the Windows Firewall section to include issues uncovered regarding the "Appliation Layer Gateway" and "Routing and Remote Access" services.  We ran into these problems firsthand and disabling the "Application Layer Gateway" service resolved our problems.  Unfortunately some of us need to use the Windows firewall when a hardware firewall is unavailble.

Using anything other than port 990 for implicit SSL will not work.  I tried it.  Filezilla server allows you to change this port but if you do you filezilla clients will fail their connect.   The WIKI needs to cover this and let users know because the implication is that it is changeable, which it is not.  More importantly, Filezilla clients are hard-coded for implicit port 990 and so wouldnt support setting it to anything else anyway.    [[User:Mozkill|Mozkill]] 21:41, 11 May 2009 (UTC)

:That's incorrect, the client supports implicit FTPS on all ports. --[[User:CodeSquid|CodeSquid]] 14:08, 13 May 2009 (UTC)

I had to add the other exe without the space in it.

About the Windows Vista configuration I report my case may help Filezilla Users. The external access did not work with the information on this wiki; the only way to make it worked was to add the port number in the windows firewall exceptions.

[[User:Cypherinfo|Cypherinfo]] 13:03, 22 October 2009 (UTC)

-zipwiz 04/12/2010

Where is the automatic / manually settable "keepalive ping" preventing timeouts on long downloads? I can only find an academic and dogmatic paragraph about servers and firewalls breaking IP RFCs. Thats completely useless, since the internet is realworld and no academic playground. Software like FileZilla should not aim at academic completeness but on dealing with what is the case out there -- and out there are more broken than compliant systems. So, PLEASE, at least add an option to set up a keep-alive ping, and if you want, add a big warning dialogue, that using this feature breaks IP laws (which no one cares about by the way).


I just finished troubleshooting a problem I had with my FileZilla server setup and I want to share so that the wiki can be improved.  My setup was a GNU/Linux computer hosting VirtualBox with a completely updated (5/4/2013) Windows XP Pro SP3 computer as a guest.  VirtualBox was setup to provide NAT between the Linux host and a private IP space for the XP guest.  Additionally, I configured the VirtualBox NAT to forward port 1343 and 5000 on the loopback interface (127.0.0.1) of the host to port 21 and 5000 respectively on the guest side.  FileZilla server 0.9.41 was installed on the XP guest, and instructed to provide 127.0.0.1:5000 as the external address for passive connections.  As such, I was able to establish a FTP command connection from Linux (directed to 127.0.0.1 port 1343).  However, when my FTP client on Linux issued the PASV command (while attempting to get a directory contents list from the server), it would get a 227 response from FileZilla server with the internal IP of the XP guest, and stall.  Strangely however, the FileZilla server interface would report that the server sent the correct external address in the 227 response (127.0.0.1 as specified in this case, though I tried others).  Using Wireshark concurrently on both sides of the VirtualBox NAT, I could see that indeed, the internal address of the XP guest was sent and received in the 227 response, despite what the FileZilla server interface reported.  According to this wiki page, my Windows Firewall had the proper exceptions setup, but I disabled the firewall nonetheless, and voila, the specified address was sent.  Then, after seeing Windows Application Layer Gateway (ALG) alluded to in this wiki, I disabled ALG, re-enabled Windows Firewall, and the 227 response remained as desired (a restart may be required).  Thus, my conclusion is that Windows Application Layer Gateway (ALG) modifies the 227 response, interfering with the establishment of the secondary FTP connection.  I write all this here, because (IMO) this issue with Windows Firewall and ALG is somewhat cryptically and incompletely addressed on this wiki page.  If someone with edit permissions can adequately address this on the wiki page, I imagine it would help many people.  Cheers.