To avoid being detected by the thousands of hackers constantly scanning for people like you with an FTP server, we can change the port that FileZilla listens on. Hackers will constantly scan the internet for hosts listening on port 21, the default FTP port. Securing Your FTP ServerĪlong with configuring the user(s) with a strong password, there are a few settings within FileZilla that you can configure to further secure your new FTP server.

To give the user further permissions, such as the ability to copy files to this repository, check the boxes beneath ‘Files’ and ‘Directories.’Ĭlick OK once you’re done setting the user permissions. By default, the user we’ve created is able to read files, list directories, and list subdirectories. Now we need to assign the user permissions for this repository. Once you’ve done that, a window like the one below will pop up, use it to select the directory you would like to share as an FTP repository.Ĭlick OK. Click Next and give this rule a recognizable name: Passive FTP Ports - FileZilla.Click OK once you’re done entering the account name, and then click on “Add” underneath the “Shared folders” section.Select the zones where this rule need to be applied (in my case I have selected all the zones).Hit Next and make sure the Allow connection option is selected.Make sure TCP is selected, and enter 50100-51100 in the Specific local ports field.A windows pops up, select Port and click next.

The result should be Windows Firewall with advanced. Lets open up the Firewall panel, press the Windows key on your keyboard and start typing firewall.

Now make sure the checkbox Use custom port range is checked and enter 50100 in the first box a and 51100 in the second.

From the tree menu click on Passive mode settings.

Click on the top menu Edit -> Settings.

Open up the FileZilla GUI on your server.

Configure FileZilla Server Passive Port Range:

Filezilla port number for ftp windows