Download FileZilla Server 0.9.51

A new version of the open source FTP server FileZilla Server has been released. FileZilla Server is a small and powerful ftp server that includes support for fxp (sending files from one ftp server to another), secure connections (ssl and tls), gss authentication and Kerberos encryption. Unlike the client version, which is also available for Linux and OS X, the server version is only developed for Windows, but not very active. Filezilla has become a bit discredited as the default download is a Download Manager that promotes other software, but this link points to the correct installation file. In version 0.9.51 the following changes and improvements have been made:

New features:

• Added diagnostic message to the administration interface if FTP over TLS is disabled and if the configured certificate is expired or otherwise invalid
• Added diagnostic message to the administration interface if no passive mode IP has been configured and the server appears to be behind a NAT router
• The settings dialog layout had a spring cleaning. The security settings, passive mode settings and TLS settings pages have received the most cleanup.

Fixed vulnerabilities:

• The code that checks that the peer’s data connection IP address matches the control connection IP had been nonfunctional. Vulnerability discovered and reported by Amit Klein.
• Added option to force TLS session resumption on the data connection to prevent data connection stealing
• FileZilla Server now randomizes the port used for passive mode transfers to mitigate data connection stealing when using plain FTP