IIS FTP on Server 2022 - Issue with passive mode port range

Question

Hi there,

I currently run a Windows Server 2022 on AWS (EC2) and I finished setting up a FTP Server with IIS with this guide.

When I connect from localhost, everything is fine.

Remotely I have no issue to login. However as soon as I want to get data:

ftp> ls

229 Entering Extended Passive Mode (|||49827|)ftp: Can't connect to `X.X.X.X:49827': Connection timed out421 Service not available, remote server has closed connection.

I immediately figured this is because the port range used for data transfer (passive mode) isn't matching what I setup.

We can see in the error log my ftp client trying to reach port 49827 while I configured IIS passive port range to 50000-50100.

On IIS Manager I made sure to add my AWS public IP and set the port range at the server AND ftp site level.

I also made sure to allow any TCP connection from anywhere to this range on both:

• AWS firewall, with a new inbound rule
• Windows Firewall, also with a new inbound rule

I'm a bit lost on what could be the issue. I read there and there that it could be related to my version of IIS which is 10.0.20348.1

Many thanks,

Alex

Answer 1

Hello Alex,

We appreciate your engagement here in the Microsoft Community. For assistance with your IIS-related matters, we recommend reaching out to Microsoft Q&A. This platform is dedicated to addressing advanced users' technical inquiries and providing expert guidance. Feel free to share your concern on the Microsoft Q&A section by following the "Introduction to Q&A" link: Microsoft-supported products in Q&A | Learn with Microsoft

Thank you for your understanding and collaboration.

Regards,

Karlie