ERROR 425 - Windows Firewall issue! [SOLVED]

[Ben_QC]

Hi all, I'm at the point where I had to register here to find the solution because for the life of me, I can't figure-out the problem. After spending two days trying to figure why my client device cannot upload files to my folder using FZ server, it turns-out that if I completely turn-off Windows Firewall, then all works fine.

I never **ever** played with the firewall and the rules and settings in there are the ones setup by Filezilla at installation time.

In Windows Firweall <inbound rules> there are 4 for FileZilla Server. Our network admin went-in and changed all four FZ firewall rules so that any inbound connection on UDP or TCP will be accepted. Bascially, like this:

Profile: ALL
Enabled: YES
Action: ALLOW
Override: NO
Program: C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
Local address: ANY
Remote address: ANY
Protocol: One rule is TCP, the other is UDP
Local port: ANY
Remote port: ANY
Allowed users: ANY
Allowed computers: ANY

Even after applying all those rules to all four FZ entries, it STILL does not let me upload files. I can connect but I just can't upload a file.

But then, if I turn-off Windows firewall, then all works fine!! What is going-on?!

Any help is greatly appreciated because I have no idea what's going-on.

Many thanks.

Benoit
Ottawa, Canada

[botg]

Program: C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe

That's just the administration interface. The server itself is in FileZIlla Server.exe.

[Ben_QC]

Thanks.... soooo... what's the solution then?

Sorry, I'm not much of a network person... do I simply create these rules in the Firewall for FileZIlla Server.exe?

Thanks again,

Benoit

[botg]

Yes, a rule allowing full network access should be fine. If you want a more restrictive rule please consult our Network Configuration guide.

[Ben_QC]

Thanks for the fast reply. So it works now! Yay!

If I may ask since you appear to be one of the FZ developers, is there any particular reason that the default FZ server installation does not create any rules for <FileZilla Server.exe>?

Many thanks again!

Benoit

[botg]

A firewall that can be modified by a program is a security vulnerability. I expect Microsoft to lock down their firewall so that only the user, or system administrator, can change the firewall configuration.

[Ben_QC]

Ah ok, fair enough.

Thanks for your help!

Benoit

[boco]

@botg: You wish. Every program with admin right can simply call the "netsh advfirewall" command to do anything and everything.