Today the material will be devoted to the consideration of the process installations and settings FTP servers in the operating room Windows system Server 2016, and we will also talk about what FTP and FTP server are in general.
FTP (File Transfer Protocol) is a data transfer protocol. It was developed a long time ago and is currently widely used on the Internet to transfer files. This protocol is often used by site administrators in order to download or upload files to their hosting on the Internet.
The FTP protocol is implemented according to the scheme " client-server”, i.e. There are FTP clients and, accordingly, an FTP server.
FTP server is the server on which it is deployed software, which allows you to receive files from remote computers via FTP and send them. The FTP server provides the user with information in the form of a file structure.
FTP client is software designed to gain access to an FTP server. Using an FTP client, users can download and upload files to an FTP server.
There are actually a lot of programs that allow you to implement an FTP server ( More FTP clients), today, as you already understood, we will talk about the implementation of an FTP server in the Windows Server 2016 operating system using standard role services.
Now we will consider the process of minimal installation for an FTP server, i.e. we will install only what is needed for the FTP server, namely this " FTP service" And "". In other words, let's imagine that you have nothing on the server, and you have a task to deploy an FTP server, for example, so that some remote users who are not employees of your company can download and upload files.
Note! If you already have any role services installed " IIS Web Server"And in particular" IIS Management Console", then you, of course, do not need to install them, you just need to check if the "FTP Service" is installed and if it is, then proceed to setting up the FTP server.
In this article, I will show two options for installing an FTP server: the first using a wizard and the second using Windows PowerShell.
We open " Server Manager”, for example from the start menu.
At this step of the wizard, we can immediately click " Further».
Then select the type of installation " Installing roles or features", click" Further».
In the next step, select the target server, I have one, so I immediately click " Further».
At the stage of choosing roles, mark the role " Web server (IIS)».
We will immediately be prompted to install and " IIS Management Console", click" Add Components", since we need these management tools, in order to administer the FTP server, click" Further».
At the stage of selecting components, we do not select anything, since we no longer need any components. Click " Further».
And here we come to the choice of role services " Web server (IIS)”, where we need to uncheck all unnecessary checkboxes ( in case we only need an FTP server), and mark only " FTP service" And " IIS Management Console", click" Further».
Check the installation parameters and click " Install».
After the installation is completed, the wizard will signal this to us, click " close and restart the server.
To install roles and features in Windows PowerShell there is a special cmdlet Install-WindowsFeature. To set up an FTP server with PowerShell run the following commands.
To install FTP Service
Install-WindowsFeature -Name "Web-Ftp-Service"
To install the IIS Management Console tool
Install-WindowsFeature -Name "Web-Mgmt-Console"
After installation it is better to restart the server.
After installing the FTP service and the IIS management console, restarting the server, you can proceed to configure the FTP server.
The first thing we need to do is create users or a group and add users to it that we want to give the right to connect to the FTP server.
For example, I will create a UserFTP user. This can be done in the " Computer management". To run this tool go to " Server Manager->Tools->Computer Management».
Then open the item " Local Users and Groups”, right-click on the item users and select“ New user". Fill in the required fields and click " Create". As a result, we will have a new user.
Then we need to set up directories. On the C drive, by default, the directory " C:\inetpub\ftproot' is the root directory of the FTP server. In this directory, we will create a separate directory for our FTP site, for example, I called it TestFTP. In it we will create the LocalUser directory ( case is important) - this is for user isolation to work, and already in this directory we create folders with a name that will match the username in my case - this is UserFTP. As a result, the full path to the user directory will look like this - "C:\inetpub\ftproot\TestFTP\LocalUser\UserFTP", and in order to further test the operation of the FTP server, let's create a test file in this directory, for example Test.txt .
We open " IIS Manager».
Then in the window Connections»right-click on the item « Sites” and choose “ Add FTP site».
Then we enter the name of our FTP site, I called it " TestFTPSite” and specify the directory that will be the root of our FTP site ( we created it earlier). Click " Further».
At this step, we indicate the binding to the IP address, I indicated " All free”, You can select a specific IP from the dropdown list. We also specify the SSL settings here, I indicated " Without SSL", but it's better to use SSL certificate for encryption.
It remains only to configure authentication and users who can connect to our FTP server. I choose " Usual» Authentication, i.e. I do not need anonymous connections, and I specify a specific UserFTP user, I created it a little earlier. It will have both read and write permissions. IN " combat"environment, as I said, it's better to create a group and add FTP users to it, and in this case here we would choose the item " Specified user roles or groups” and indicated the group we created. Click " Ready».
In order to set up user isolation, i.e. so that each user has his own directory and he cannot see others, select the item “ User isolation».
Mark the item " Username directory (disable global virtual directories)» and press « Apply».
This completes the setup, we check the operation of the FTP server, i.e. try to connect with any FTP client preferably from another computer. I have connected.
To remove the FTP server, i.e. those roles that we have set above, you can use the wizard, i.e. " Remove Roles and Features Wizard"or the same Windows PowerShell. In order to start the wizard, we also open the server manager and in the menu " Control» choose « Remove roles and features". After the wizard starts, we do the same as during installation, only we do not check the boxes, but rather remove them.
To remove an FTP server from Windows PowerShell, you can use the cmdlet Uninstall-WindowsFeature. The delete commands will look like this ( after deletion, you need to restart the server).
To remove the IIS Management Console component
Uninstall-WindowsFeature -Name "Web-Mgmt-Console"
To uninstall the FTP Service
Uninstall-WindowsFeature -Name "Web-Ftp-Service"
That's all for me, I hope the material was useful to you, for now!
In one of my materials, the possibility of using this server to implement some tasks slipped through. In this article I will try to explain in as much detail as possible the basics of setting up a FileZilla FTP server under Windows. This server is relatively easy to set up, consumes few resources, is invisible during operation, and also has a convenient console with very informative logging. You can manage the server remotely. The main purpose of an FTP server is to provide direct access to files and folders to users connecting to the server, that's what I'll talk about
What do we need:
1.
FTP server Filezilla - follow the link, scroll down the page and see FileZilla Server version 0.9.41 at the time of this writing, download
2.
FTP client or any browser to check if the FTP server is working
# Installation
Run the downloaded distribution and start the installation
1.
In the first step, press I Agree
2.
Next, you need to select the installation components, there is nothing complicated here, leave it as it is or remove the shortcuts, you do not need to install Source Code
3.
Choose the installation location, you can make it by default
4.
at the fourth step, you need to select the parameters of the server service, there are 3 options:
A. Installing the server as a service and automatically starting
b. Installing the server as a service and manually starting it, the server will not work when the system starts
V. Installing the server as a normal application and automatically starting
The choice depends on how regularly and for what the server will work, if you need constant access in an automatic stealth mode, then the option A, if for solving one-time problems, then the option B
In addition, you need to select the port through which the control panel will connect to the server, it should not be occupied by other software, in most cases you can leave the default port, i.e. 14147
5.
Selecting the server interface launch method, I recommend choosing Start manually, because by and large, the interface will be needed 1 time - during initial setup and only occasionally it will be necessary to make changes, so it makes no sense to keep it always running, leave the checkbox, then the interface will be launched immediately after the installation is completed, click Install
#
Setting
At the end of the installation, the server manager will be launched, first a window will appear asking you to configure the connection to the server, because the server is on the same PC as the manager, how Server address we leave
127.0.0.1
, we don’t touch the port either, it was it that was specified during installation, or we change it if it was changed earlier. leave the password blank, because By default it is not there, you can install it later. We put a daw, we connect
# Basic server configuration
Select from the menu Edit -> Settings, this is the main server configuration, let's make some nice changes. I will not dwell on all the options, but will only point out the most significant and useful for most users.
1.General Settings. You can change port 21 to something else, this is usually not necessary, but it can be useful to protect your server from unnecessary attacks, i.e. Port 21 will be unavailable and those who are not aware can assume that there is no server. You can also specify the maximum number of simultaneously connected users, which helps to reduce the load on weak machines. Below you can specify the number of processor cores that will be used by the server to distribute the load.
- IP Filter- a filter for restricting access by IP ranges, in the first list we enter the addresses and ranges to which we deny access to the server, and in the second, those addresses from the first list of ranges that will be given an exception, i.e. granted access
2. Miscellaneous. There are some useful things in advanced settings. The first checkbox (if available) allows you to hide the prol sent by the user in the server interface window, the second checkbox will launch the application minimized. The third checkbox will allow files opened for writing to be transferred, it is not recommended to do this - files can be damaged, the fourth checkbox
3. Logging. Logging itself is disabled by default, but can be enabled. The size can be limited, then the file will be overwritten when the limit is reached. You can also set the log to one large file (not recommended) or create logs by day + activate the option to delete after the required time period
4. Speed Limits. Ability to set speed limits for downloading and downloading. You can simply make a general speed limit or add the required number of rules by day and hour. Useful to prevent the FTP server from downloading the entire channel
5. Autoban. The name speaks for itself, if the user specifies incorrect credentials several times in a row, then his address is blocked. The number of attempts and the blocking interval are specified. Useful against brute programs that carry out a banal enumeration, they can be stopped by this method
When finished setting, you can click OK.
# Adding Users
Go to the menu Edit -> Users. First, I will describe the general procedure for adding users
1. General. Here we create a new account. Click Add, a field appears for entering the username and selecting the group to which we want to add it. If there is no group, then it cannot be selected accordingly. For servers with a small number of accounts, it is not necessary to create groups, it is enough just to create several accounts and assign their rights to each
Then put a tick Password and enter the password for the account. Below you can set limits for the user on the number of connections and the number of connections from one IP. Zero values will mean no restrictions
2. Shared folders. Here, for a specific user, we select the folders to which he will have access and rights to these folders.
If there are already several users, then in the right window we select the one to whom we will add rights, then on the left click Add, and select a folder on the PC, if you need access to several folders, then add more, one of the folders must be marked as HomeDir, those. the folder where the user will go by default when connecting to the server. Sometimes it is necessary to give access to different PC disks to one user, there is one caveat - you can add as many folders as you like within one disk, but in order to give access to another disk, you need to make an Alias, i.e. alias link from the HomeDir directory drive to required folder another disk. To do this, create access to another folder on another disk, then right-click on the created folder - Edit Aliases, in the HomeDir folder field, to which the user has access + we also add the alias of the virtual folder, which will send us to the folder of another disk. in our case it turns out D:/Temp/Soft. Now, when connecting to its main folder, the user in Temp folder will also see the Soft folder and be able to go to it, while it will be located on another disk
Now about the rights to files and folders. We select the required user and folder, and work with the checkboxes, depending on the required capabilities
read- read only, i.e. you can view files and folders on the server and download them
Write- allows you to overwrite existing files
Delete- delete files and folders
Append- adding new files to the server
Create- create new folders
List- view the contents of folders
+Subdirs- view all folders that are nested in the main
If we create an anonymous user i.e. which will be used by several users at once to receive any data from the server, then we need to create an account with the name anonymous without a password, add the necessary directories to it and assign rights to them. usually anonymous users only need to read (for security first of all), i.e. enable rights for it read, List, +Subdirs
3.Speed Limits & IP Filter. Here, as in the main server config, you can make individual settings for the account regarding restrictions on addresses and speeds, it is convenient to create exceptions to the basic rules
We save the settings. If desired and in large numbers server users, you can create several groups if there are differences for them in terms of rights. To do this, you need to go to Edit ->Groups. The configuration of group rights is the same as the configuration of an individual user, after creating a group, you can simply create a user and select a group for him, after which he will have group rights
When setting up the server, it is quite logical and convenient to protect access to users from it, for this you need to go to the menu server, it will have 2 options - Active And lock. The first option is active by default and if you uncheck the box, then the server will be turned off and no one will be able to connect, at this moment it will be possible to configure it, when the server is first turned on, all settings will be applied. Activation lock allows you to leave the server running, but blocks it, i.e. users will see that the server is running, but they will be denied access to it
After configuring the server, you can close the administrative panel, it is not necessary to launch it for the server to work
There are many ways to transfer large files over the Internet, but almost all of them are limited - either in file size or in volume. free space, or by jump speed.
But there is one great option - creating an FTP server. Its main advantages:
The setup is very simple. To do this, you will need an FTP server program (or rather, a utility) called Golden FTP Server ( Free versions will suffice).
Have you downloaded the program? Installed? Now let's start creating. To do this, follow the instructions below:
That's all. Now you know how to make an FTP server. And you can freely exchange files with any users.
To check that the creation of the FTP server was successful, go to it through Internet Explorer.
By the way, one more thing. Shared documents can be downloaded simultaneously by several users to whom you have given a download link. Of course, the speed of the jump in this case will be divided. But if you have 100 Mbps, then this is not a problem. Just to keep you informed.
If you do not understand how to set up an FTP server, and all this is too complicated for you, then you can try other options. Fortunately, there are at least 5 more ways,.
Due to numerous requests from readers, in this HOWTO we will take a detailed look at installing and configuring an FTP (file) server under Windows using the most popular FileZilla Server as an example.
The choice of FileZilla Server is due to the fact that it is one of the fastest and most reliable (with correct setting) FTP servers with a graphical configuration module. The server is regularly updated and has good documentation in English.
We will consider installation and configuration in more detail under the cut. Attention, traffic (many screenshots)!
Download the server installation program from its official website and run it. The first steps of the wizard are standard for most Windows applications, so we will only consider the last two in detail.
On the page Startup settings You will be prompted to choose how to start the FTP server:
Here it is also proposed to select the port that will listen to the administrative interface of the server. The default is 14147 .
On the page Startup settings you are prompted to choose a way to launch the administrative interface:
Checkbox in checkbox Start Interface after setup completes will automatically launch the server's administrative interface when installation is complete. Do not remove the checkbox from here.
This completes the server installation. Let's start setting it up.
So, start the server and the administrative interface if they are not already running.
You can start the server like this: Start — (All programs — FileZilla Server — Start FileZilla Server, or using the command:
Net start "FileZilla Server"
You can start the administrative interface like this: Start — (All programs — FileZilla Server — FileZilla Server Interface.
After starting the administrative interface, you will see a window prompting you to enter the server IP (for local, leave 127.0.0.1 ), the admin port (if you changed it during installation, enter the correct option here, otherwise leave the default value) and password.
The default password is empty (it can be set in the server settings on the page), so immediately press OK to go to the main window (click to enlarge):
Most of this window is occupied by the FTP server activity log, which will display detailed records of connecting users and the transfers initiated by them. At the bottom of the window you will see the logins of all connected users, their IP addresses and the progress of downloading/uploading files. By right-clicking on the login, you can disconnect the user from the server ( Kick user), or block its access by IP ( Ban user).
Open the server settings by selecting from the menu Edit paragraph Settings.
General settings
On this page you can change the main port of the FTP server from 21 to any other if your provider blocks incoming connections to it. Here you can also set timeouts in seconds, after which the user will be automatically disconnected from the server. To disable timeouts, set the value 0 . If you want to limit the maximum number of connected users, this can be done in the line Max number of users(default is set 0 , i.e. there are no restrictions).
General settings -> Welcome message
General settings—Welcome message Here you can replace the default greeting sent to clients when they connect to your FTP server. You can enter up to 1024 characters, each line must be no longer than 75 characters.
Check the checkbox Hide welcome message in log to reduce the size of the log files by disabling the recording of this message in them.
General settings -> IP bindings
General settings - IP bindings On this page, you can specify the IP addresses of the network interfaces that the FTP server should listen on. We recommend leaving * , i.e. listening on all possible interfaces.
General settings -> IP Filter
General settings - IP Filter On this page you can manage the list of banned IP addresses, i.e. addresses from which access to the server will be closed (upper field), as well as addresses that cannot be banned through the administrative interface (lower field).
Each address is entered on a new line. In our example, the three specified IP addresses will not be able to connect to the server, and 192.168.98.187 will be impossible to block.
If you have a router with NAT, then this is one of the most important pages for you. Check the checkbox Use custom port range and specify the range of ports (numbers from 1024 to 65535 are allowed) that will be used in passive FTP mode to connect clients to your server. The minimum range is 100 ports, but it is recommended to specify at least 400. You must forward this port range in the settings of your router (router). It is recommended to specify ports in the range from 30000.
Here you must specify your external IP address. You can specify a hostname, with the help of which the server will independently determine your external IP address. In our example, the DynDNS.org service is used. If you have a static external IP, just enter it in the field Use the following IP. If the IP is dynamic, use the DynDNS.org service or similar and in the field Use the following IP enter the received hostname (as in our example).
Check the checkbox (if it was not checked) Don't use external IP for local connections to prohibit the use of external IPs for local connections. This will solve NAT loopback issues on most routers.
On this page, you can enable the use of the FXP protocol, which allows you to transfer files between two FTP servers directly. This is disabled by default (checked). If you need FXP support, uncheck all checkboxes on this page.
Paragraph Don't show passwords in message log allows you to hide user passwords from server logs.
Start minimized will enable the launch of the administrative interface in minimized tray mode.
Other settings on this page should not be changed.
Here you can change the port that the administrative interface listens on, as well as the administrator password.
Check the checkbox Change admin password and set a new administrator password. Allowed letters and numbers.
On this page, you can enable server logging (logs) to a file by checking the checkbox Enable logging to file. Checkbox in checkbox Limit log file size to will allow you to specify the maximum allowed file size. If the file exceeds the specified number, it will be purged.
Paragraph Log all to FileZilla Server.log allows you to write all server logs to one file, and Use a different logfile each day creates a new log file every day, so we recommend this item. Checkbox Delete old log files after includes automatic cleaning of old logs.
All logs will be stored in a subdirectory Logs FileZilla Server installation directory.
Here you can set global upload and download speed limits. These limits will be applied by the server for all users.
To set a speed limit, put a dot in the item Constant speed limit of and enter the value in kilobytes per second.
In addition to this page, you can set limits for each user individually in the user management module.
Some FTP clients support compressed data transfer. Compression can be enabled by checking the checkbox Enable MODE Z support. The minimum and maximum compression ratios are also indicated here. Be sure to check the checkbox Exclude private IP address ranges, which will disable compression when transferring files inside local network, or when local connection to the server.
Attention! Enabling compression may adversely affect the performance of the FTP server.
On this page, you can enable automatic IP blocking for users who entered the password incorrectly a certain number of times. To enable this feature, check the box Enable automatic bans, in line Ban IP address after specify the maximum number of incorrect password entry attempts (minimum 10), and in the line Ban for— time in hours for which the violator will be banned.
FileZilla Server allows you to create an unlimited number of users. For each user, it is possible to set their own working folder, access parameters, speed limits, etc.
To manage users in the menu Edit admin interface select item Users.
When you first start in your section Users will be empty, so we have to create a user. To do this, click the button Add.
In the window that opens, specify the desired login (only Latin letters and numbers are allowed). Here you can also specify a group if they have already been created. Just login and click OK.
Select the created user in the section Users. You will be prompted to specify a working folder for it, so the page will automatically open.
Click the button Add in the section and specify the directory on the disk that the selected FTP user will have access to. Then select it from the list and click Set as home dir. This action will prevent exit from this directory to the top for security reasons.
For each added directory, you can set read/write permissions by checking or unchecking the checkboxes.
File permissions:
Rights for directories:
Now go to the page General. Set a password for the user by checking the checkbox Password and entering a password.
Checkbox enable account allows you to enable/disable the selected FTP account. Here you can also set limits on the maximum number of connections for a user. Speed limits for the user are set on the page.
To delete a user, select it in the section Users and press Delete. Button Rename allows you to change the login for the selected user (rename), and Copy- clone, i.e. create a copy with a different login.
After making the desired changes, click the button OK. User settings take effect immediately.
If you need anonymous access to the server, open the user management window, add a user with a login anonymous, uncheck the checkbox Password to disable the password request, on the page, select a home directory that will be available to everyone, and set necessary rights(do not forget to disable recording, resuming and deleting files and directories). After pressing OK anonymous access to the server will be open to everyone.
Successful FTP transfer requires very precise and meticulous setup. True, in the latest client programs, this process is largely automated. Nevertheless, the need to make basic settings for the connection still remains. Let's take a detailed example of how to configure FileZilla, the most popular FTP client today.
In most cases, if your connection is not made through the firewall of the router, and the communication provider or server administrator does not put forward any special conditions for connecting via the FTP protocol, then it is quite enough to make the appropriate entries in the Site Manager to transfer content.
For these purposes, go to the "File" section of the top menu, and select the "Site Manager" item.
You can also access the Site Manager by opening the corresponding icon in the toolbar.
The Site Manager opens in front of us. To add a connection to the server, click on the "New Site" button.
As you can see, the fields in the right part of the window have become editable, and the name of the new connection appears in the left part - “New Site”. However, you can rename it as you like, and how this connection will be more convenient for you to be perceived. This parameter will not affect the connection settings in any way.
Next, go to the right side of the Site Manager, and start filling out the settings for the New Site account (or whatever you want to call it). In the column "Host" we write the address in alphabetical form or the IP address of the server with which we are going to connect. This value must be obtained on the server itself from the administration.
We select the file transfer protocol supported by the server to which we are connecting. But, in most cases, we leave this default value "FTP - File Transfer Protocol".
In the encryption column, if possible, we also leave the default data - "Use explicit FTP over TLS if available." This will maximize the protection of the connection from intruders. Only if you have problems connecting over a secure TLS connection, it makes sense to select the "Use plain FTP" option.
The default login type in the program is anonymous, but most hostings and servers do not support anonymous connection. Therefore, we select either the item "Normal" or "Request a password". It should be noted that when choosing the normal login type, you will connect to the server through the account automatically without entering additional data. If you select the "Request a password" option, you will have to enter the password manually each time. But this method, although less convenient, is more attractive from a security point of view. So it's up to you.
In the following fields "User" and "Password" you enter the login and password given to you on the server to which you are going to connect. In some cases, you can then change them if you wish by filling out the appropriate form directly on the hosting.
The rest of the Site Manager's Advanced, Transfer Settings, and Encoding tabs do not require any changes. All values should remain default, and only in case of some connection problems, according to their specific causes, changes can be made in these tabs.
After we have entered all the settings, in order to save them, click on the "OK" button.
Now you can connect to the appropriate server by going through the site manager to the desired account.
In addition to the settings for connecting to a specific server, there are general settings in the FileZilla program. By default, the most optimal parameters are set in them, so often users never enter this section. But there are individual cases when in the general settings you still need to perform certain manipulations.
In order to get into the general settings manager, go to the "Editing" section of the top menu, and select the "Settings ..." item.
In the first Connection tab that opens, you enter connection parameters such as the timeout, the maximum number of connection attempts, and the pause between waits.
The "FTP" tab indicates the type of FTP connection: passive or active. The default type is passive. It is more reliable because active connection in the presence of firewalls and non-standard settings on the provider's side, connection defects are possible.
In the “Transmissions” section, the number of simultaneous transmissions is configured. In this column, you can select a value from 1 to 10, but the default is 2 connections. Also, if you wish, you can specify a speed limit in this section, although it is not limited by default.
In the "Interface" section, you can edit the appearance of the program. This is probably the only section of the general settings for which it is permissible to change the default settings, even if the connection is working correctly. Here you can choose one of the four available types of panel layouts, specify the position of the message log, set the program to be minimized to tray, make other changes during appearance applications.
The name of the "Language" tab speaks for itself. Here you can select the language of the program interface. But, since FileZilla automatically detects the language installed in the operating system and selects it by default, in most cases, no additional actions need to be taken in this section.
In the "Edit files" section, it is possible to assign a program with which you can remotely edit files directly on the server without downloading them.
In the "Updates" tab, there is access to setting the frequency of checking for updates. The default is one week. You can set the parameter "every day", but given the actual timing of the release of updates, this will be an unnecessarily frequent parameter.
In the "Input" tab, it is possible to enable the recording of a log file, and set its maximum size.
The last section - "Debug" allows you to enable the debug menu. But this feature is only available to very advanced users, so for people who are just getting acquainted with the capabilities of the FileZilla program, it is definitely useless.
As you can see, in most cases, for the FileZilla program to work correctly, it is enough to make settings only in the Site Manager. General settings the most optimal programs have already been selected by default, and it makes sense to intervene in them only if there are any problems with the application. But even in this case, these settings must be set strictly individually, with an eye to the features operating system, provider and server requirements, and installed antiviruses and firewalls.
