FTP - two FTP sites on different IP addresses

WW-6729 371 Reputation points
2020-12-15T11:45:09.267+00:00

Hello,

I have Microsoft Windows Server 2016 FTP configured. I am using two IP addresses, one IP for one FTP site and second IP for second FTP site. I can access to the first FTP site with no problem but I cannot access second FTP site. FTP site configurations are the same, one local user is created for one site and second local user is created for second site. When connecting with the second user I receive PASS * 530 5 1 ControlChannelClosed - - 0 0 and recently I received PASS * 530 5 2 ControlChannelClosed - - 0 0. Both users have same permission on the FTP folders.

Did anybody had the same issue? Can it be related because I am using two IP addresses (both IP addresses are defined under network configuration)?
48347-image.png

Thank you!

ASP.NET Core
ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
4,208 questions
Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,389 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. WW-6729 371 Reputation points
    2020-12-15T12:26:07.38+00:00

    I've managed to find out where the problem was. I needed to connect to that specific FTP site using IP address designated for that FTP site and not using server hostname. Another question: how can I use two FTP sites on one IP address?

    Thank you!

  2. MotoX80 32,076 Reputation points
    2020-12-21T18:10:52.51+00:00

    Why don't you use one FTP site and just isolate the users to their own folders?

    https://learn.microsoft.com/en-us/iis/configuration/system.applicationhost/sites/sitedefaults/ftpserver/userisolation

    Or use NTFS permissions to restrict the folders that each user account can access?

    0 comments
  3. WW-6729 371 Reputation points
    2020-12-23T09:00:49.143+00:00

    One more question. The link provided https://learn.microsoft.com/en-us/iis/publish/using-the-ftp-service/using-ftp-virtual-host-names-in-iis-7 tells about virtual host names and I've managed to set it up using this link. What is this option and when to use it "Enable Virtual Host Names": 50727-image.png

    What is the difference between virtual host names explained in the link and this options? When to use configuration explained in the provided link and when can I use option from the picture and how to use this option? I've tried to create FTP site the classic way (not following the link) and enabling option at the picture and tried to connect with ftp:somesite.domain and all I get is window to enter credential all the time - credentials are not accepted. When I disable this option "Enable Virtual Host Names" I can access my FTP site normally. Thanks!

  4. MotoX80 32,076 Reputation points
    2020-12-23T15:54:27.027+00:00

    If you already have 2 different IP addresses on the server, just set the site bindings to use the correct IP. Don't use 127.0.0.1. Don't use virtual host names.

    Why are you messing with multiple FTP sites and virtual FTP host names? You shouldn't need to do that. How many users do you have that will connect? Can't you use user isolation on a single FTP site?

    At the place that I last worked, we were working on eliminating FTP completely. The network traffic is not encrypted. You really should install the OpenSSH feature and use SFTP instead of FTP.

    50912-capture.jpg

    0 comments