Home All Groups Group Topic Archive Search About

Problem granting IP address access to FTP using System.Management

Author
9 Jan 2007 4:09 PM
Konstantin
I am using System.Management to grant IP addresses permission to access our
FTP server.  I am setting PutOptions type to UpdateOrCreate and issuing Put()
function. New IP address is added to FTP security, but cannot access the FTP
server unless FTP service is restarted on Windows 2003. Is this a default
behaviour of FTP service or is that a problem with FTP or my code that needs
to be fixed?

Author
10 Jan 2007 7:00 AM
Charles Wang[MSFT]
Hi,
From your description, I understand that:
You found that the FTP service need to be restarted when you used Put()
function to add new IP address to FTP security.
If I have misunderstood, please let me know.

As far as I know, FTP service is not responsible for checking IP address.
It just check the login with user/password. The filter to IP address is set
on firewall or gateway. 
I will discuss this issue with a WMI expert for further research and will
let you know the result as soon as possible.

Thanks for using Microsoft Managed Newsgroup.

Charles Wang
Microsoft Online Community Support

======================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================
Author
10 Jan 2007 3:28 PM
Konstantin
This is one of the options of IIS FTP server under Directory Security tab in
Properties "Deny all but the list of IPs" or something of that nature. I've
notice that even when adding users manually using Properties dialog of FTP
server, this issue still happens. Please let me know what you can find out.

Konstantin

Show quote
"Charles Wang[MSFT]" wrote:

> Hi,
> From your description, I understand that:
> You found that the FTP service need to be restarted when you used Put()
> function to add new IP address to FTP security.
> If I have misunderstood, please let me know.
>
> As far as I know, FTP service is not responsible for checking IP address.
> It just check the login with user/password. The filter to IP address is set
> on firewall or gateway. 
> I will discuss this issue with a WMI expert for further research and will
> let you know the result as soon as possible.
>
> Thanks for using Microsoft Managed Newsgroup.
>
> Charles Wang
> Microsoft Online Community Support
>
> ======================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================================================
>
>
Author
11 Jan 2007 8:08 AM
Maurino
Hi Kostantin

did you include:

                                        entry.CommitChanges();
                                        entry.RefreshCache();

at the end of your code, after add/modify the new rules?

Maurino

Konstantin ha scritto:

Show quote
> This is one of the options of IIS FTP server under Directory Security tab in
> Properties "Deny all but the list of IPs" or something of that nature. I've
> notice that even when adding users manually using Properties dialog of FTP
> server, this issue still happens. Please let me know what you can find out.
>
> Konstantin
>
Author
11 Jan 2007 9:32 AM
Charles Wang[MSFT]
Hi Konstantin,
Thanks for your clarification and let me understand your issue clearly.

I just discussed this issue with our IIS professional and got the
confirmation that it is required to restart FTP service after your
configuring the IP range in IIS.
This KB article also talks about this:
How To Configure PassivePortRange In IIS
http://support.microsoft.com/kb/555022

Hope this helps.
Please feel free to let me know if you have any other questions or concerns.

Charles Wang
Microsoft Online Community Support

======================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================
Author
11 Jan 2007 4:26 PM
Konstantin
Charles,

Thank you for your response. However, looking at that article I did not find
information on required restart after an IP has been granted or denied
access. Can you please direct me to an article that talks about it, since I
will need to present it as a prove to my management.

Thank you,

Konstantin

Show quote
"Charles Wang[MSFT]" wrote:

> Hi Konstantin,
> Thanks for your clarification and let me understand your issue clearly.
>
> I just discussed this issue with our IIS professional and got the
> confirmation that it is required to restart FTP service after your
> configuring the IP range in IIS.
> This KB article also talks about this:
> How To Configure PassivePortRange In IIS
> http://support.microsoft.com/kb/555022
>
> Hope this helps.
> Please feel free to let me know if you have any other questions or concerns.
>
> Charles Wang
> Microsoft Online Community Support
>
> ======================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================================================
>
>
>
>
>
Author
14 Jan 2007 5:56 PM
Charles Wang[MSFT]
Hi Konstantin,
Sorry for the late reply due to a sick leave last Friday.

Yes, it did not clearly say FTP service need to be restarted after the
configuation, however the last step of each configuration requires
restarting the FTP service. Anyway, I will perform further discussion with
our IIS professional later and surely let you know the response as soon as
possible.
If you could leave me (chang***@microsoft.com) an email address, that is
better for timely notifying you.

Sincerely yours,
Charles Wang
Microsoft Online Community Support

======================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================

AddThis Social Bookmark Button