Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

Allow an FTP Server Through Windows Firewall

This guide shows you how to let FTP connections pass through the Windows firewall. Without it, you cannot upload files to your server.

Windows Hosting2 min read23 steps2 screenshots

What are FTP and a firewall?

FTP means File Transfer Protocol. It sends files between your computer and a server, like a mail truck for files. A firewall is a guard on the server. It blocks traffic unless a rule allows it. FTP uses port 21 to start the talk. A port is a numbered door on the server. Files then travel through other doors, called passive ports.

You need admin rights. This guide assumes an FTP server is already set up in IIS.

Method 1: Use the built-in rule

  1. Click Start and open Windows Defender Firewall.
  2. Click Allow an app or feature through Windows Defender Firewall.
    FTP Firewall
  3. Click Change settings.
  4. Find FTP Server in the list.
  5. Tick the boxes for Private and Public as needed.
  6. Click OK.

Method 2: Make your own rules

  1. Open Windows Defender Firewall with Advanced Security.
  2. Click Inbound Rules, then New Rule.
  3. Choose Port and click Next.
  4. Choose TCP and Specific local ports. Type 21.
  5. Choose Allow the connection.
  6. Tick the profiles you need: Domain, Private, Public.
    FTP firewall
  7. Name the rule, for example FTP port 21, and click Finish.

Set the passive port range

  1. Open IIS Manager and click the server name.
  2. Double-click FTP Firewall Support.
  3. In Data Channel Port Range, type a range, for example 50000-50100.
  4. Click Apply.
  5. In Windows Firewall, add one more inbound rule for TCP ports 50000-50100.
  6. Restart the FTP service from Services or run iisreset.

Command line way

netsh advfirewall firewall add rule name="FTP 21" dir=in action=allow protocol=TCP localport=21
netsh advfirewall firewall add rule name="FTP Passive" dir=in action=allow protocol=TCP localport=50000-50100

These commands add one rule for the main FTP door and one for the passive range. Run them in a Command Prompt opened as administrator.

Test it

  1. Open FileZilla on your own computer.
  2. Type the server IP, the FTP user name, password and port 21.
  3. Click Quickconnect.
  4. You should see the folder list.
Tip: If it still fails, a network firewall outside the server may block ports. Ask Hostvento support.
Warning: Plain FTP sends passwords without hiding them. Use FTP over TLS (FTPS) or SFTP when you can.

Quick recap

  • The firewall blocks FTP unless you allow it.
  • Open port 21 and a passive port range.
  • Set the same range in IIS FTP Firewall Support.
  • Test with FileZilla.