How to Use FTP Behind a Proxy Server

• Microsoft Proxy Server version 2.0
• Microsoft Internet Information Server versions 3.0, 4.0

SUMMARY

This article describes how to set up an FTP server behind a proxy server.

Note that using this method may help you to resolve the following error message:

Event Id 7023 at FTP server when trying to start FTP service
Source: Service Control Manager
Type: Error
Description: The FTP Publishing Service service terminated with the following error:

MORE INFORMATION

To set up an FTP server behind a proxy server:

1. Disable the FTP Publishing service on the proxy server.



2. Install the Winsock Proxy client on the FTP server.



3. Create a file named Wspcfg.ini with the following contents. Place the file in the same folder as the Inetinfo.exe file on the FTP server.




[inetinfo]
serverbindtcpports=21,20
localbindtcpports=20
killoldsession=1
persistent=1
forcecredentials=1

4. If Access Control is not being used, skip to step 5. If Access Control is going to be enabled for Winsock on the proxy server, use the Credtool utility to specify the user credentials.
   
   You cannot set the account as which the service will run in the properties for the FTP Publishing server (using the Services tool in Control Panel). You can do this with the Credtool utility. The account you use can be an existing Microsoft Windows NT domain account or a new one. You just need an account to use as you do when you are configuring Microsoft Exchange behind a proxy server.



5. In the Winsock properties on the proxy server, click Add on the Protocols tab to create a new protocol. Use the following settings:




Protocol Name: FTP Server
Initial Connection: 21 TCP Inbound
Click Add in this dialog box and add the following items:
Port Range: 1025-5000
Type: TCP
Direction: Inbound

6. Enable Packet Filtering and add the following custom filters:




   Protocol   Direction   Local port                 Remote port
   -------------------------------------------------------------
   TCP        Out         20                         Any
   TCP        In          21                         Any
   TCP        Both        Dynamic port (1025-5000)   Any 

7. After you configure the proxy server, you must obtain and install the hotfix listed in the following article in the Microsoft Knowledge Base:




Q236001 Err Msg: 425 Can't Open Data Connection

Q210459 How to Set Up Packet Filtering to Allow FTP Connection

Additional query words:

Keywords : kbenv
Version : winnt:2.0,3.0,4.0
Platform : winnt
Issue type : kbhowto