Host FTP Server on Windows with FileZilla - A Step-by-Step Guide

Setting Up an FTP Repository on Windows with FileZilla

This guide details the process of establishing a folder on your Windows system as an FTP repository. We will utilize the free software, FileZilla, to achieve this. FTP facilitates the streamlined transfer of numerous files between computers.

The created FTP repository can be accessed from multiple computers over the internet, effectively allowing others to interact with the directory directly through Windows Explorer.

Downloading and Installing FileZilla Server

The initial step involves downloading FileZilla Server, which is readily available online.

Following the download, proceed with the installation, accepting all default settings. FileZilla installs a service that automatically runs upon Windows startup.

If you prefer manual control over the FTP server's operation, select the corresponding option from the dropdown menu during the third screen of the installation process.

With the exception of this setting, all other parameters can remain at their defaults for the purposes of this tutorial.

Upon completion of the installation, the FileZilla interface will appear. Simply acknowledge the prompt by clicking "OK".

Configuring the FTP Repository

With the FTP server interface loaded, we can now designate a directory as our FTP repository.

If the desired directory doesn't already exist, minimize the interface and create a new folder to serve as the FTP share.

For this demonstration, we will utilize a folder named 'FTP' located on the desktop. Its full path is "C:\Users\geek\Desktop\FTP".

Navigate to Edit, then select Users.

Within the subsequent window, click on "Shared folders".

Next, click "Add" underneath the "Users" section.

Enter a username for the account that will be used by another computer to access the FTP repository we are configuring.

Confirm the account name by clicking "OK", and then click "Add" underneath the "Shared folders" section.

A window will appear, allowing you to select the directory you wish to share as an FTP repository.

Click "OK" to proceed.

Setting User Permissions

Now, we must assign permissions to the user for this repository.

By default, the created user has permissions to read files, list directories, and view subdirectories.

To grant additional permissions, such as the ability to upload files, check the corresponding boxes under 'Files' and 'Directories'.

Once you have configured the desired user permissions, click "OK".

Enhancing FTP Server Security

Beyond establishing robust passwords for user accounts, several configurations within FileZilla can be implemented to bolster the security of your newly established FTP server.

Malicious actors continuously probe the internet for hosts operating on port 21, the standard FTP port. To mitigate detection by these persistent scans targeting FTP servers, altering the port FileZilla utilizes is advisable. Navigate to Edit, then Settings. Within the "General settings" section, locate "Listen on these ports." Currently set to 21, it’s recommended to change this to a randomly selected five-digit number, ensuring it remains below 65535.

While this modification doesn't inherently secure the server, it effectively obscures its presence and complicates discovery. It's important to acknowledge, however, that determined attackers will likely eventually identify the port on which your FTP server is listening, necessitating additional security layers.

Provided you possess knowledge of the IP addresses – or at least the IP range – of the computers intended to connect to your FTP server, FileZilla can be configured to respond exclusively to login attempts originating from those specified IPs. Access this functionality under Edit > Settings, then select "IP Filter."

Initially, input an asterisk into the first field to block all IP addresses from establishing connections to your server. Subsequently, define exceptions to this rule within the second field, specifying the IP addresses or network ranges permitted to connect. The following example illustrates a configuration allowing connections from 10.1.1.120 and the 192.168.1.0/24 network range (encompassing addresses from 192.168.1.1 to 192.168.1.255):

This configuration restricts access to authorized sources, enhancing overall security.