Help setting up FTP file access on Windows Server 2016
We have a Windows on-premise Server 2016 with Exchange 2016 also installed. We have been trying to set up FTP access to files on the server, so that we can save website backups etc. to the server. We have looked at and followed several articles across the internet but have been unsuccessful with the set up. We would appreciate someone helping us through the FTP setup, including any ports that need to be opened on both the server firewall and the internet hub firewall (BT Smart Hub).
McKnife
May I ask why FTP and not SMB? Because by default, SMB is already active and reachable on exchange Servers.
ASKER
McKnife - Most of the backup etc. programs we use can only send files through FTP. My limited understanding of SMB is that it is mostly used for file collaboration. Our use is specifically for other programs to remotely put files on the server, like backups, which will not be on the same intranet.
ASKER
Forgot to say in the topic that, if possible, we would like to use SFTP rather than plain FTP.
Making an Exchange Server do anything other than Exchange is ill-advised. Messing with IIS settings can break your Exchange Administration or OWA or both. If need this service, shrink the Exchange VM and install an additional VM for this purpose. Consider using a linux version on that if you don't want to buy a license.
ASKER
Lee W, MVP - We are not touching the IIS or Exchange. It is simply that we want to be able to connect with a webserver (running Plesk) and download the website backup files from the webserver. We are not hosting any websites on our Windows server, we are just storing the backups.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
McKnife - We followed the steps in the link you gave us and set up SFTP, including firewall ports both on the server and the internet hub. However, we have tried to connect to the server using Filezilla and the connection times out (we increased the timeout period to 60 seconds in case it needed longer than the default period).
We are using SFTP protocol to connect to the server IP, set to a different port than usual (which is then forwarded to the server with internal port 22) and we are using username and password authentication.
We would appreciate any help with this.
We are using SFTP protocol to connect to the server IP, set to a different port than usual (which is then forwarded to the server with internal port 22) and we are using username and password authentication.
We would appreciate any help with this.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
McKnife – We tried this and it is now working! Ideally, for added security, we would use port forwarding to a non-default SFTP port, can we can do this? We also wondered how to change the root directory for a specific user. Regardless, it is now working and we are very grateful for your help.
Uufilezilla is an FTP client, am not sure whether it handles sftp. Connection.
To the suggestion Mcknife made, add the openssh.client option to your Windows 10 workstation and use the command window to test the functionality/setup of you sftp.
Sftp username@server2016
If using FTP, it is a two port protocol, and when used behind a firewall, and to accommodate clients behind firewalls, you need to limit the range of the data port and then configure that range in the Internet facing port forward..
What is the backup software, and why would you need to push the backup into the exchange?
To the suggestion Mcknife made, add the openssh.client option to your Windows 10 workstation and use the command window to test the functionality/setup of you sftp.
Sftp username@server2016
If using FTP, it is a two port protocol, and when used behind a firewall, and to accommodate clients behind firewalls, you need to limit the range of the data port and then configure that range in the Internet facing port forward..
What is the backup software, and why would you need to push the backup into the exchange?
It works on the standard port? Fine. I don't know what could have gone wrong with your port forwarding. But if you do it for security reasons, be aware that it doesn't help much, while offering extra ports on exchange should be avoided. Exchange is ver very critical for domain security. Unless you use the split permission setup option, owning exchange means owning all user accounts.
That said, I don't recommend to use exchange for that and you surely don't have to.
That said, I don't recommend to use exchange for that and you surely don't have to.