Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Alright here's my problem iv recently set up an ftp server and everything works fine except when i try to allow svchost.exe through the firewall, I get the error message "windows cannot allow svchost through firewall". If i disable the firewall there are no problems but i would rather have the firewall up (for obvious reasons) can anyone please tell me why it is not allowing the application through the firewall and how to fix? Or what i may have done wrong to receive this message as all the tutorials iv seen do not have this issue. Thanks in advance for any help.

share|improve this question
Don't use FTP. FTP Must Die. – EEAA Oct 27 '12 at 21:30

I think that you misunderstand what svchost.exe is. This article, which is for Vista, is still relevant.

svchost is a process that hosts windows services. There are many instances of it on a system at a given time and each one hosts a different service. You don't want to allow svchost through your firewall. This will essentially expose any service that needs to perform an action and gets encapsulated in an svchost.exe process.

This is not the way to solve the issue that you're having. You should use port-based rules to allow FTP, not executable-based rules.

share|improve this answer
If you add the FTP Server role to the Web Server role on W2K8 and W2K8R2 it does in fact create several FTP inbound rules which are bound to svchost.exe targeted at the service with the short name FTPSVC. – joeqwerty Oct 28 '12 at 0:01
Really? I never realized that. Seems I need to dig into the pre-configured Windows Firewall settings a bit more. – MDMarra Oct 28 '12 at 0:03
Yeah. It seemd kind of weird to me, but I haven't dug into the Windows Firewall with Advanced Security very much at this point. The rules appear to be "combo" rules consisting of both port, program and service parameters. Since they're created automatically they aren't editable but you can view the parameters. In fact, most of the automatically created rules (based on the installed roles, role services and features) seem to have similar parameters. – joeqwerty Oct 28 '12 at 0:12
Thanks for the quick response guy's and while there's good info here I still don't understand how i can get passed this. Iv tried adding new rules for inbound traffic with the advanced firewall config but still no luck, atm it's not a huge issue but i would very much like to understand what im doing wrong here. – Anthony Oct 28 '12 at 16:45
@Anthony It might help if you explain the actual problem that you're trying to solve rather than just the error that you're getting. – MDMarra Oct 28 '12 at 20:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.