Good Morning, I have an IIS based FTP server on my network. When users try to access this FTP server they are being denied access. Upon further review, these users are trying to access the FTP using what appears to be random ports in the 3000 - 5000 range. Port 21 is open and accessible, but I can see the users hitting these other backend ports when they try to access the FTP resource. I had heard that there is a way to lockdown which ports, on the backend, IIS based FTP can use, but I can’t find out where that setting is specified. If I could specify which ports FTP can use, then I can open those specific ports and be done with this. I only need directory access to FTP via web browser. Any help is greatly appreciated. Thank you!

http://learn.iis.net/page.aspx/309/configuring-ftp-firewall-settings/ check out the section how to define passive port range and how to allow it in the firewall.

Thank you for this information, however I am working on a Windows Server 2003 box. This is great information to have, but do you have this same information for Server 2003? Thanks!

my apologize, didnt read the post properly and missed os 2003 http://support.microsoft.com/kb/555022 describes how to set the range in older iis versions