FIX: FTP passive mode support for firewall scenarios

If you must use the Microsoft FTP server (included with Internet Information Services (IIS) 5.0) in passive mode between firewalls, you can fix the range of TCP ports that the server uses for the data channel.

A supported feature that modifies the default behavior of the product is available from Microsoft. However, this feature is intended to modify only the behavior that this article describes. Apply this feature only to systems that specifically require it.

If the feature is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the feature.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific feature. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the feature is available. If you do not see your language, it is because the feature is not available for that language. The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

The code change in this hotfix honors a registry setting. To define the port range that you want the FTP service to use, follow these steps:

1. Start Registry Editor.
2. Locate the following registry key:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSftpsvc\Parameters
3. Add a value that is named PassivePortRange of type REG_SZ.
   
   Note If the PassivePortRange value exists, the range that FTP will validate is from 5001 to 65535. However, you can use either a range or a single number.

For more information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the following article number to view the article in the Microsoft Knowledge Base: For more information about how to install multiple hotfixes with only one reboot, click the following article number to view the article in the Microsoft Knowledge Base: