IIS 7.5 FTP with ftps (SSL)

ftpiisiis-7.5tls

I have an FTP server that uses IIS 7.5, running on a Windows Server 2008 machine. When I try to connect to this server using filezilla with implicit TLS (ftps://), I always recieve this error:

GnuTLS error -15: An unexpected TLS packet was received.

The server connects fine when I don't use TLS (ftp://) or with explicit TLS (ftpes://) so I believe it is not a SSL issue.

Am I missing a configuration here?

Update:
I was trying to connect to ftps using port 2122.

Best Answer

Ensure that you have a binding for port 990, as that is the implicit FTPS port. Without that binding your site in IIS will not support implicit FTPS.

Related Solutions

Firewall – IIS 7.5 FTP “error in the push function”

The chances are good that your firewall supports FTP by watching the control connection (basically what you pasted above) and opening ports dynamically to enable the data connection to be made (where it said: "150 Opening BINARY mode data connection.").

You've encrypted the control connection. The firewall can't see inside to do that.

What you'll want to do is edit the firewall to permit a range of ports (how many depends on the number of clients you'll have) to enter (or leave, if you're permitting "active" PORT commands instead of or in addition to PASV). You will then need to configure the FTP server to only use those ports.

It is hard / annoying, but I've seen it work with at least one secure FTP server

Iis – How to resolve FTP Error “Failed to retrieve directory listing” for Administrator account in IIS 7.5

I had this issue as well, and it was related to the data ports being selected by IIS. I set it up to use a specific port range but when my client tried to use passive mode it showed that it was using the wrong port.

This article describes the method for calculating which port it is using. e.g.

227 Entering Passive Mode (x1,x2,x3,x4,y1,y2)

The IP it would be using is x1.x2.x3.x4 and port (y1*256) + y2. I was seeing the wrong values for y1 and y2 so I had to restart "Microsoft FTP Service" to actually get it to recognize the values I had set in the FTP Firewall Settings in IIS.

Best Answer

Related Solutions

Firewall – IIS 7.5 FTP “error in the push function”

Iis – How to resolve FTP Error “Failed to retrieve directory listing” for Administrator account in IIS 7.5

Related Topic