problems using different FTP port with windows firewall

[Tod]

Hi all. It would be fab if you could help me please!

I need to run 2 ftp sites on the same server (windows server 2003).
I've got the first one using port 21, but need the second ftp site to
use a different port I think (unless there's a way to get 2 ftp sites
working on port 21? binding?).

so, for my second ftp site I am using port 8001. it works ok with my
ftp client with the windows firewall off, but when I turn it on and
add port 8001 to it my ftp client doesn't want to connect any more.

I've noticed that my ftp client is actually connecting using port 8001
but then switches to an arbiutary port number afterwards when
finishing the connection. This port number changes each time, so it's
impossible to add it to the windows firewall! I think this is the
problem. the windows firewall doesn't support port ranges either (to
my knowledge?) so even if I knew a range I couldn't add it to the
firewall.

Any help anyone could offer would be greatly appreciated. Many thanks


Tod

[frank]

TCP/IP has 65,536 ports available. As you can imagine, some ports are used
much more than
others. Ports are divided into three main groups or designations as follows:

Well-known ports These port numbers range from 0 to 1,023. These are the
most commonly
used ports that have been used for the longest period of time.

Registered ports These port numbers range from 1,024 to 49,151. Registered
ports are used
by applications or services that need to have consistent port assignments.
These ports, like the
well-known ports, are agreed upon by most organizations for standardization
of use.

Dynamic or private ports These port addresses range from 49,152 to 65,535.
These ports are
not assigned to any particular protocol or service and can therefore be used
for any service or
application.

It is common for applications to establish a connection on a well-known port
and then move
to a dynamic port for the rest of the conversation. It's important that you
understand port numbers,
because you may be configuring them for communication purposes as well as to
provide
filtering and therefore prevent communication of specified applications or
services.

Use the upper ports (>49.152)




Frank