Solved

Windows 2003 - tuning for internet activity especially FTP

Posted on 2004-08-25
5
608 Views
Last Modified: 2011-10-03
I have some applications that use FTP to upload data to a windows 2003 server on the Internet (uses IIS6).

I am using the Indy 9 - idFTP component.

I am having frequent timeouts and some simple commands

idFTP.Connect(True);; // returns in a few moments
ifFTP.List(MyFileList,'*.xml',False); // get frequent timeouts here

I have a battlke with FTP services on this server, and while it could be the Indy components for whatever reason, what can I do to optimize my W2K3 server for internet use, especially FTP.

0
Comment
Question by:he00273
  • 2
  • 2
5 Comments
 
LVL 17

Expert Comment

by:Microtech
ID: 11890036
Hi he00273,

ms have a document that may help http://support.microsoft.com/default.aspx?scid=kb;en-us;816517&Product=winsvr2003

Hope This helps
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 500 total points
ID: 11890094
be aware of the active and passive modes of FTP :)

Passive and Active FTP

There are two types of FTP (File Transfer Protocol) these are Active and Passive

Active FTP

Pros (good for network administrators)
Cons (not so good for the client)

The FTP server will try and make a connection on a lot of high port numbers (these could well be blocked on the clients side Firewall)


Passive FTP

Pros (good for the client)
Cons (Not good for the network administrators)

The client makes the connection to the FTP server, and one will be a high port number that will almost certainly be blocked by the network firewall (server side)


Solution

To strike a happy medium, administrators can make their FTP servers available to many clients by supporting passive FTP; reserving a range of port numbers does this, in this way all other ports can be firewalled, thus decreasing the security risk

Luckily, there is somewhat of a compromise. Since administrators running FTP servers will need to make their servers accessible to the greatest number of clients, they will almost certainly need to support passive FTP. Specifying a limited port range for the FTP server to use can minimize the exposure of high-level ports on the server. Thus, everything except for this range of ports can be firewalled on the server side. While this doesn't eliminate all risk to the server, it decreases it tremendously. See Appendix 1 for more information.

*****Links*****
http://slacksite.com/other/ftp.html
http://www.cisco.com/en/US/about/ac123/ac147/ac174/ac199/about_cisco_ipj_archive_article09186a00800c85a7.html
0
 

Author Comment

by:he00273
ID: 11900348
Thanks for the support so far, I have followed the tuning steps as per
http://support.microsoft.com/default.aspx?scid=kb;en-us;816517&Product=winsvr2003

The problem still exists, I still get frequent timeouts and the
1. Server is not busy
2. Turning the W2K3 firewall off did not resolve the problem (so I turned it back on quick)
3. The clients reports 'connection lost'. The server system event log reports  client timeouts.
4. I have been told by the network administrators there is no network congestion and that there is plenty of spare bandwidth.

The upload always uses passive mode, the client can select between passive and active.

Do I have a dodgy OS install or a bad network card or something else?




0
 

Author Comment

by:he00273
ID: 11949118
From using a network packet analyser, it was found that the Checkpoint firewall was dropping some packets coming back in from the Interent server.

The Firewall administrator modified the rules and said to do all transfers in active not passive mode, so in making that change plus his firewall rule change, it appears to be working satisfactorily now.

As the active/passive feedback was the most correct PeteLong gets the points.
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11955919
ThanQ
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Occasionally Windows/Microsoft Updates will fail to update. We have found a code that will delete all temporary files and re-register all dll's related to Windows/Microsoft Updates! This works 99% of the time to get the updates working again! The…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now