Win7 on firewall open FTP service and ping solution

1. Windows Firewall Open FTP service

The following 4 steps would allow both Non-secure and SSL FTP traffic through.

Run cmd, after:

1. If your FTP is a RC0 version, skip to the 3rd step, and if your version is RC0, enter the following command line in CMD and press ENTER to execute the command:

SC Sidtype ftpsvc Unrestricted

2. After performing the 1 steps, restart the FTP service:

net stop ftpsvc & net start ftpsvc

3. Set up the firewall to allow the "ftpsvc" service to listen on all the ports it has opened:

netsh advfirewall firewall add rule name= "FTP for IIS7" Service=ftpsvc Action=allow protocol=tcp dir=in

4. Ensure that firewall FTP filtering is forbidden:

netsh advfirewall set global statefulftp disable


After you execute the above command.

Warning:do not use active FTP connections with SSL If client is behind NAT. It won't work.

2. Windows Firewall Open Ping

(1), view, turn on or disable the system firewall open a command prompt enter the input command "netsh firewallshow state" and then enter to view the status of the firewall, from the display results can be seen in the firewall each function module disabled and enabled. The command "netsh firewall set opmode disable" is used to disable the system firewall, whereas the command "Netsh firewall set opmode enable" enables the firewall.

(2), allow file and print sharing files and print sharing in the LAN commonly used, if you want to allow clients to access the local shared files or printers, you can enter and execute the following command: netsh firewall add portopening UDP 137 netbios-ns ( Allow client access to server UDP protocol 137 port) Netsh firewall add portopening UDP 138 NETBIOS-DGM (Allow access to 138 ports of UDP protocol) netsh firewall add portopening The TCP 139 NETBIOS-SSN (139 ports that allow access to the TCP protocol) netsh firewall add portopening tcp 445 netbios-ds (Allow access to 445 ports of the TCP protocol) after the command finishes, file and print sharing The required ports are released by the firewall.

(3), allow ICMP echo by default, WINDOWS7 does not allow external hosts to ping tests for security reasons. However, in a secure LAN environment, the ping test is necessary for the administrator to conduct network testing, how to allow Windows 7 ping test echo it? Of course, the System Firewall console allows you to set the "File and print Sharing (Echo request –icmpv4-in)" rule to allow in the inbound rules (if the network uses IPV6, you also want to allow icmpv6-in rules.) )。 However, we can quickly implement the Netsh command at the command line. Execute the command "netsh firewall set icmpsetting 8" To turn on ICMP echo, whereas "netsh firewall set icmpsetting 8 disable" can turn off echo.

Win7 on firewall open FTP service and ping solution