Re: Windows XP and FTP

Hi there,

Yes, unfortunately I have exceptions enabled.... Looks like this may be an MS Problem as Nick has stated. Thanks for your help :)



Kindest of regards,

Hamish Stanaway, CEO

Absolute Web Hosting / -= KoRe WoRkS =- Internet Security
Auckland, New Zealand

http://www.webhosting.net.nz
http://www.buywebhosting.co.nz
http://www.koreworks.com





From: Shadow Mlists <mlists@xxxxxxxxxxxxxxxxxxx>
To: koremeltdown@xxxxxxxxxxx
CC: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Windows XP and FTP
Date: Wed, 11 Jan 2006 09:32:31 -0800
MIME-Version: 1.0
Received: from smtpout.michigan.gov ([136.181.195.42]) by bay0-mc10-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 15 Jan 2006 09:11:30 -0800
Received: from coreismtp1.state.mi.us ([10.42.124.7]) by COREOSMTP1.som.ad.state.mi.us with InterScan Messaging Security Suite; Sun, 15 Jan 2006 12:06:49 -0500
Received: from mail pickup service by coreismtp1.state.mi.us with Microsoft SMTPSVC; Sun, 15 Jan 2006 12:06:39 -0500
Received: from corespam1.som.ad.state.mi.us ([10.42.124.14]) by coreismtp1.state.mi.us with Microsoft SMTPSVC(6.0.3790.211); Sat, 14 Jan 2006 12:17:25 -0500
Received: from coreav1.michigan.gov ([136.181.135.30]) by corespam1.som.ad.state.mi.us with InterScan Message Security Suite; Sat, 14 Jan 2006 12:17:12 -0500
Received: from outgoing.securityfocus.com ([205.206.231.27]) by coreav2 with InterScan Messaging Security Suite; Sat, 14 Jan 2006 12:17:18 -0500
Received: from outgoing.securityfocus.com by outgoing.securityfocus.com via smtpd (for [136.181.135.30] [136.181.135.30]) with ESMTP; Sat, 14 Jan 2006 09:17:08 -0800
Received: from lists.securityfocus.com (lists.securityfocus.com [205.206.231.19])by outgoing3.securityfocus.com (Postfix) with QMQPid B572D23903D; Wed, 11 Jan 2006 10:03:57 -0700 (MST)
Received: (qmail 27766 invoked from network); 10 Jan 2006 22:46:54 -0000
X-Message-Info: JGTYoYF78jGJocPckpvzmfnXEJ+8P+Y3mFUPQPUcRQA=
Mailing-List: contact security-basics-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Precedence: bulk
List-Id: <security-basics.list-id.securityfocus.com>
List-Post: <mailto:security-basics@xxxxxxxxxxxxxxxxx>
List-Help: <mailto:security-basics-help@xxxxxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:security-basics-unsubscribe@xxxxxxxxxxxxxxxxx>
List-Subscribe: <mailto:security-basics-subscribe@xxxxxxxxxxxxxxxxx>
Delivered-To: mailing list security-basics@xxxxxxxxxxxxxxxxx
Delivered-To: moderator for security-basics@xxxxxxxxxxxxxxxxx
X-Spam-Status: No, hits=2.1 required=4.0
X-Spam-Level: ++
X-Antivirus-Shadow-Security-Mail-From: mlists@xxxxxxxxxxxxxxxxxxx via mailserver.shadow-security.net
X-Antivirus-Shadow-Security: 1.25-st-qms (Clear:RC:0(220.244.41.238):SA:0(2.1/4.0):. Processed in 3.213454 secs Process 80369)
User-Agent: Thunderbird 1.5 (Windows/20051201)
References: <20060110011058.12554.qmail@xxxxxxxxxxxxxxxxx>
X-imss-version: 2.035
X-imss-result: Passed
X-imss-scanInfo: M:P L:E SM:0
X-imss-tmaseResult: TT:0 TS:0.0000 TC:00 TRN:0 TV:3.51.1030(14204.000)
X-imss-scores: Clean:51.63246 C:2 M:3 S:5 R:5
X-imss-settings: Baseline:6 C:4 M:4 S:4 R:4 (2.0000 2.0000)
Return-Path: security-basics-return-37714-glomskit=michigan.gov@xxxxxxxxxxxxxxxxx
X-OriginalArrivalTime: 14 Jan 2006 17:17:25.0906 (UTC) FILETIME=[63BB7F20:01C6192E]

koremeltdown@xxxxxxxxxxx wrote: 
Hi there list,

I have come accross something that I am not sure how to tackle.
I have Windows XP (as do many of my clients) and have noticed something strange.
When trying to access my server(s) via FTP, when Windows (XP Pro) Firewall is turned on, you cannot perform this task. Sometimes it has problems resolving the hostname, sometimes it just doesn't connect at all.
When disabling Windows Firewall FTP works fine, however when just enabling FTP Access via the firewall configuration it doesn't seem to want to work. My XP using clients seem to be having the same problem.
I could ask all of my XP using clients to just disable their XP Firewall when uploading their websites via FTP, but I don't think the more savvy customers would appreciate doing that (they are smart enough to realise what it means to disable a firewall on todays internet).
My question to the list is, does anyone know how to correctly configure XP Firewall to get around this issue, or is disabling the firewall the only way? I would like to include this in my FAQ, so the easier workthrough the better.
THanks guys and gals!

Kindest of regards,

Hamish Stanaway, Director

Absolute Web Solutions (New Zealand) Limited
http://www.absolutewebhosting.biz/

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------




My apologies if this is "under you", but where you've turned on the firewall in the security centre, have you got the "Don't allow exceptions" box ticked?

Just a thought.

Good luck.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------

Relevant Pages

  • Re: Problem about Window Xp SP2 firewall and the buildin FTP command
    ... Problem about Window Xp SP2 firewall and the buildin FTP ... I find a problem that if running multiple FTP command at the same ... Windows XP SP2 to limit Max Connections/sec ...
    (microsoft.public.windowsxp.general)
  • Problem about Window XP SP2 firewall and the buildin FTP command
    ... Problem about Window Xp SP2 firewall and the buildin FTP ... I find a problem that if running multiple FTP command at the same ... Windows XP SP2 to limit Max Connections/sec ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Problem about Window Xp SP2 firewall and the buildin FTP command
    ... I copy your example ftp command file to a.txt saved in C:\dell folder. ... I cannot turn off Windows Firewall, since it is controlled by Domain ...
    (microsoft.public.windowsxp.general)
  • RE: Windows XP and FTP
    ... >>>Looks like you are using FTP in active mode. ... >>>which is then intercepted by the Windows Firewall. ... >>education and the case study affords you unmatched consulting experience. ... >>Planning, Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: Problem about Window Xp SP2 firewall and the buildin FTP command
    ... I checked the firewall log, ... I always test the XP SP2 on both my own FTP ... I copy your example ftp command file to a.txt saved in C:\dell folder. ... I cannot turn off Windows Firewall, since it is controlled by Domain ...
    (microsoft.public.windowsxp.general)