Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

From Windows Firewall with Advanced Security

Inbound Rules window shows the following setting:

enter image description here

By right-clicking the selected row above and choose Properties, we have

enter image description here

The Properties window says that

An inbound rule to allow Passive FTP traffic for Internet Information Services (IIS) [TCP > 1023]

Now let us compare with the following...

IIS Manager Help

enter image description here

It says that

Specifies the port range for passive connections used for data channel connections. The valid range for ports is 1025 through 65535. (Ports from 1 through 1024 are reserved for use by system services.)

I am confused which one is the correct one?

share|improve this question
up vote 1 down vote accepted

According to the Internet Assigned Numbers Authority, use ports starting at 1024 through 65535. Ports below 1024 are reserved as Well Known Ports:

The Well Known Ports are assigned by the IANA and on most systems can only be used by system (or root) processes or by programs executed by privileged users.

share|improve this answer
According to, the data port is greater than 1023. – LaTeX Mar 1 '11 at 4:04

I think that 1024 (including) and up is the correct port range to assign for FTP passive connections.

Anyway It does not matter that much because the only difference between port range below 1024 and above is that you will need root privileges to create listening socket in range 0-1024.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.