Server1 runs Windows Server 2012 R2 and is installed as an FTP server. Client uses App1 to connect to Server1 for FTP. App1 uses TCP port 21 for control and a
dynamic port for data. You have allowed port 21 in firewall. What should you do next in order to allow clients to use App1 to connect to server1 using ftp.
A.
At Server1 allow firewall rule of outbound
B.
At Server1 allow firewall rule of inbound
C.
Netsh advfirewall domainprofile state off
D.
Netsh advfirewall set global StatefulFtp enable
Explanation:
Set global statefulftp
Configures how Windows Firewall with Advanced Security handles FTP traffic that uses an initial connection on one port to request a data connection on a different
port. This affects both active and passive FTP.
D is correct.
http://technet.microsoft.com/fr-fr/library/cc771920(v=ws.10).aspx
The post that says it must be disable, is if you configure ftp and predetermine the port, and create the rules, then it must be disable. The simplest way, is to enable it, and leave the ftp server as is. The firewall will then listen to the ftp session for the port open command and allow the negociated port to be openned.
0
0