1

After installing IIS 7.5 on a new Windows 2008 r2 server I found that FTP was active even though it was never installed. There does not appear to be any thany third-party FTP server installed. I tried installing FTP and then removing it and rebooted after the installation and removal and still able to connect via FTP. Luckily it's not possible to login with my admin account nor could I login as anonymous. How is this possible?

4
  • How did you discover that FTP was active? What did you find? How did you confirm it?
    – joeqwerty
    Mar 12, 2016 at 3:14
  • From another computer, I just entered the command 'ftp myservername" and it responded with "Connected to myservername. 220-FTP authentication:"
    – kjanz1899
    Mar 17, 2016 at 18:26
  • Have you verified that the name resolves to the ip address of the server in question and not to a different ip address altogether?
    – joeqwerty
    Mar 17, 2016 at 19:26
  • Yes the name resolves to the correct IP and when I request a web page (HTTPS) that is unique to the server that page is returned.
    – kjanz1899
    Mar 17, 2016 at 21:02

1 Answer 1

0

You probablly installed it with IIS. Disable the site from IIS and you should be fine.

4
  • It was not installed with IIS and there are no FTP sites listed in IIS manager.
    – kjanz1899
    Mar 11, 2016 at 15:11
  • Connect over to it and see who responds on that port: telnet host port. This will give you an idea if you have something else that might respond on that. In rare cases I've seen js ftp servers like this one github.com/alanszlosek/nodeftpd .
    – Alex H
    Mar 11, 2016 at 15:57
  • Ran a packet capture on both client and server. From the client side I see the connection being made to the server, but on the server side there are no packets from the client's IP.
    – kjanz1899
    Mar 17, 2016 at 18:29
  • Also blocking ports 21 and 23 on the server with windows firewall is not helping.
    – kjanz1899
    Mar 17, 2016 at 18:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .