The PASV port range modification method for the FTP server under IIS

  • 2020-05-06 12:05:35
  • OfStack

Although some methods can be used to reduce the port range, the scope can not be reduced to the ideal range, normally PASV port will use up to 10, even if the dedicated FTP download server 20 is enough. Here's how to modify the PASV port range of the FTP server using the IIS administration utility Adsutil.vbs:

Use the command line to execute
in order cd c:\Inetpub\AdminScripts
adsutil.vbs set /MSFTPSVC/PassivePortRange "10000-10009"

It is possible that some servers have been securely configured so that direct execution will prompt a failure message, so you need to use cscript, log in with the administrator user, and proceed to the command line to execute
in the following order cd c:\Inetpub\AdminScripts
cscript adsutil.vbs set /MSFTPSVC/PassivePortRange "10000-10009"

This example opens the specified 10 ports 10000 to 10009
Restart the FTP service after execution. If a firewall is started, add exceptions to these ports in the firewall.

At this point, the port changes are complete

Related articles: