I want to use FTP and Windows XP Pro's firewall, but I have a problem. What am I missing?

Question

I have a FTP server running on a separate computer. Its operation is verified.

I wrote a .cmd file to use with a batch to automate downloading files to the Windows XP Pro computer. The firewall noticed I was using FTP the first time I tested, and it asked if I wanted to Block or UnBlock. I chose UnBlock. I continued and I was able to connect to the server in FTP, but when I tried to download files, it reported errors and sat trying to download instead of actually downloading.

I suspected the firewall, so I disabled the firewall and the files transfer fine. I have left instructions with the user about disabling the firewall, doing the FTP transfer and then re-enabling it, but I only want that to be a temporary work around.

Windows XP Pro experts, tell me what I am missing to make this work while the firewall stays up. I'm sure the user will forget to put the firewall back up and that will cause problems I don't want.

Answer 1

It appears that most of those answers are more or less correct. However, enabling and disabling various and specific ports within the Windows Firewall, is half-baked at best if not impossible. I recommend not using the Windows Firewall at all and using the Sygate Personal Firewall, though you will have to set permissions for all the programs manually, it is far more effective than the Windows Firewall. It has no automatic mode so even if a "known" program requests access you will have to set it manually, but you only have to set each program once.

It also depends on the FTP program you were using. I have not had any trouble using FileZilla in any capacity, on any Firewall, once the permissions were set correctly.

If this is a business environment then you may not be able to use the Sygate Firewall, you will have to purchase the professional version of the same program. Though, I think you will still be able to use FileZilla, if I remember the EULA correctly.

Answer 2

Go into the exceptions in windows firewall (Have to click on settings). Make sure that FTP (also known as file and printer sharing) is checked. A security window might come up letting you know the computers files are vonerable during this time. If it does, click ok or yes to confirm you understand that and make sure these changes are also set on the other computer. It should work fine after that.

Answer 3

If I remember my ftp, you need to open both port 21 and 22 for standard ftp to work correctly.

Answer 4

make sure the FTP ports are open in the Firewall

Answer 5

->start->control panel->windows firewall->exceptions tab->add port->name: ftp port: 21->ok ->ok