How to Use an Intranet FTP Server or ISA Server Behind a Proxy Server (209400)



The information in this article applies to:

  • Microsoft Proxy Server 2.0
  • Microsoft Internet Information Server 3.0
  • Microsoft Internet Information Server 4.0

This article was previously published under Q209400

SUMMARY

This article describes how to set up a File Transfer Protocol (FTP) server behind a proxy server.

Using this method may help you to resolve the following error message:
Event Id 7023 at FTP server when trying to start FTP service
Source: Service Control Manager
Type: Error
Description: The FTP Publishing Service service terminated with the following error:
For ISA server: Microsoft does support FTP server publishing for the upload and download of files and Microsoft supports Web Publishing of FTP sites for the download of files only.

MORE INFORMATION

To set up an FTP server behind a proxy server:
  1. Disable the FTP Publishing service on the proxy server.
  2. Install the Winsock Proxy client on the FTP server.
  3. Create a file named Wspcfg.ini with the following contents. Place the file in the same folder as the Inetinfo.exe file on the FTP server.

    [inetinfo]
    serverbindtcpports=21,20
    localbindtcpports=20
    killoldsession=1
    persistent=1
    forcecredentials=1

  4. If Access Control is not being used, skip to step 5. If Access Control is going to be enabled for Winsock on the proxy server, use the Credtool utility to specify the user credentials.

    You cannot set the account on which the service can run in the properties for the FTP Publishing server (using the Services tool in Control Panel). You can do this with the Credtool utility. The account you use can be an existing Microsoft Windows NT domain account or a new one. You just need an account to use as you do when you are configuring Microsoft Exchange behind a proxy server.
  5. In the Winsock properties on the proxy server, click Add on the Protocols tab to create a new protocol. Use the following settings:

    Protocol Name: FTP Server
    Initial Connection: 21 TCP Inbound
    Click Add in this dialog box and add the following items:
    Port Range: 1025-5000
    Type: TCP
    Direction: Inbound

  6. Enable Packet Filtering and add the following custom filters:
       Protocol   Direction   Local port                 Remote port
       -------------------------------------------------------------
       TCP        Both        20                         Any
       TCP        In          21                         Any
       TCP        Both        Dynamic port (1025-5000)   Any
    					
  7. After you configure the proxy server, you must obtain and install the hotfix listed in the following article in the Microsoft Knowledge Base:

    236001 Err Msg: 425 Can't Open Data Connection

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

210459 How to Set Up FTP Server on Same Server as Proxy Server


Modification Type:MajorLast Reviewed:5/13/2003
Keywords:kbenv kbhowto kbpending KB209400