WS_FTP Server - Can it tunnel ftp over SSL connections?

Product: Version: Platform:
WS_FTP Server All NT,Win2000,XP

Question/Problem: Does WS_FTP Server/Client combination have the ability to tunnel ftp over SSL connections via one TCP connection to the FTP server?

Answer/Solution: Not at this time, WS_FTP supports only explicit SSL as a means of FTP channel protection, which utilizes the standard FTP ports 20 and 21.


We have to consider the client-side ports as well:

In Active mode, once the client logs in and prepares to transfer data it tells the server a port number (somewhere in the temporary range 1024-5000) to use for the data connection back to the client. So, the server is using port 20, but the client is using a temporary port 1024 or above.

For Example:
Control Channel..... Client port 1026 -> Server port 21
Data Connection..... Client port 1027 <- Server port 20

In Passive mode, once the client logs in, the FTP server tells the client what port to use to connect to the server for the data connection (this will be a port in a range, 1024-5000). The client will connect back from a temporary port to the FTP server on that port to open the data connection. Now, the server is using a port 1024 or above and not 20.

For Example:
Control Channel..... Client port 1026 -> Server port 21
Data Connection..... Client port 1027 -> Server port 3345 (or any port in the 1024-5000 range)

Document #:   Revision Date:
FS-20030311-DM01   06/14/04

Return To KnowledgeBase Search Page