port 21 open

[Shep]

I have 2k running behind a firewall/router I tried to set up bulletproof ftp server and it said port 21 was being used. I went to dslreports and ran a port scan and it said port 21 was open. I don't have anything that I know of running on port 21. I ran anti-trojan and didn't find anything. I have installed zonealarm and stoped access to the net for everything that I don't know what it is. What is using port 21?

[Jon]

Go to Start-->Run-->type COMMAND.

You have a command prompt. type in NETSTAT -a -n

This will show you all open ports and what they are connected to. This should help in determining why it is open. Check Foreign Address line to see if it is making an outside connection. If the State just lists LISTENING with no outside connection then it's hard telling.

[Shep]

Thanks I will try that when I get home.

update:
Ok tried netstat and port 21 is listening along with several others. How do I close the ports

[Kingslayer]

Port 21 is your FTP port.

Are you trying to make an FTP server using the FTP server in IIS or are you using a 3rd party program like Serv-U FTP. If you are using a 3rd party program, you need to go in and shut off the ftp service that is running in Win2k.

It sounds like your trying to use a 3rd party program and IIS won't give 21 up to it.

[Shep]

Originally posted by Kingslayer




you need to go in and shut off the ftp service that is running in Win2k.





That is what I needed to know. Where do I shut it off at ? I also have port 80 and a few others open and would like to close them all, they are just listening not connecting to anything.

[Jon]

Are you using Win2K Advanced Server?

[Weazel]

you could just go into add/remove programs and uninstall ftp from IIS or right click my computer...manage....services and applications....services....find the ftp server service and stop it then disable it.

[Shep]

I am using win2k pro not server. Can I just uninstall IIS or will that completly hose the system?

[Kingslayer]

You can uninstall IIS without causing problems. You can also go into your Task Manager and then services and just turn the FTP service off, then set it to manual so it won't turn back on unless you want it on. You won't need it on if you are using a 3rd party FTP program.

Don't go killing ports. Turning off the service that uses the port and killing the port are two different things. If you turn off the server, the port will remain open for use. If you kill the port you won't be able to use it.

If you kill port 21 no ftp program will work. And if you kill port 80 you will kill your internet access.

Unless you are using IIS for a reason, i.e., a webserver or an ftp server uninstall it. You don't need it for anything, and your opening a bunch of security holes. You don't need IIS installed for a 3rd party FTP program either, it should have everything that it needs.

Can I ask what FTP program you are using. If it's one that I am familiar with, I can help you set it up.

[Shep]

I am using bulletproof I had it set up on my 98 machine. I got it to work on 2k just had to change to port 20, and wanted to know what using port 21. I found out last night it is only being used when admin is logged in if a normal user is logged in it isn't open. I just wanted to close up some more of the security holes on my pc. Thanks for the help.