Xlight FTP Server Changelog

What's new in Xlight FTP Server 3.9.4.1

Apr 10, 2024
  • Fixed a bug when UTF-8 is enabled in "Execute a program based on the action in a file" the passed parameter $real_path is not correct.

New in Xlight FTP Server 3.9.4 (Feb 2, 2024)

  • Add support for rsa-sha2-512 and rsa-sha2-256 for Server RSA keys signatures (RFC8332).
  • Add error log rotation option.
  • Add MSI (*.msi) installer in the download page.

New in Xlight FTP Server 3.9.3.7 (Oct 24, 2023)

  • Update the remote admin program with the testing if an IP is in allowed or deined list.
  • Add missed error logs for SFTP when encountered some errors from Windows OS.

New in Xlight FTP Server 3.9.3.6 (Feb 22, 2023)

  • Fix a low risk SFTP vulnerability, when login failed,server responded differently for user not exist and exist.
  • Fix a compatiable problem for NLST command.

New in Xlight FTP Server 3.9.3.5 (Sep 19, 2022)

  • Add an option to use file for IP allow/deny list, which allows unlimited number of IP allow/deny list. Each line of the file can only have one IP and its subnet mask.
  • Add a test button in IP allow/deny dialog box to test if an IP will be allowed or blocked.
  • Add a special option to disable shared file downloading. When enabled, a file can only be downloaded by a single connection at one time.
  • Fix a speed bug when bandwidth limit is set for virtual server.

New in Xlight FTP Server 3.9.3.2 (Jan 5, 2022)

  • Fixed a bug that Disk quota unit for external authentication user default profile is not saved in config file.
  • Fixed a bug that GUI will crash if over 255 characters is entered in user name of access control list .
  • Auto create the folder if the folder set for log file does not exist.
  • When "Force SSL" option is selected and server receives USER command. If client doesn't initiate encrypted channel before USER command, it will be disconnected immediately.

New in Xlight FTP Server 3.9.3.1 (Oct 4, 2021)

  • Fixed an issue that SFTP uploaded file is not immediately available because Windows OS locked this file before flushing OS file buffers to disk.

New in Xlight FTP Server 3.9.3.0 (Aug 5, 2021)

  • Fixed a UTF-8 file access bug, when file name containing different encoding from Windows default language.
  • Change the failed logins option in IP auto-blocking so that you can set a time period to count failed attemps.
  • Add option to write xferlog and session log in UTF-8 format.
  • Remove the option "disable log to screen", which is not useful.

New in Xlight FTP Server 3.9.2.8 (Jun 13, 2021)

  • Fixed a crash problem.

New in Xlight FTP Server 3.9.2.7 (Jun 1, 2021)

  • Add support for long path name over 260 characters.
  • Fixed a problem 0 byte file is not logged in ODBC database file transfer log.

New in Xlight FTP Server 3.9.2.5 (Mar 23, 2021)

  • Support diffie-hellman-group14-sha1 and diffie-hellman-group14-sha256 as SSH key exchange methods.
  • Add an option to change SSH software identification string.
  • Change configuration files permission so that everyone group is not allowed to read.
  • Increase user login IP range total entries limit from 16 to 32.

New in Xlight FTP Server 3.9.2.0 (Feb 1, 2021)

  • Put all language files under "lang" folder after install. User can switch language from right click Localization Menu.
  • Fixed a few small bugs.

New in Xlight FTP Server 3.9.1.7 (May 3, 2020)

  • Fixed a home path permission bug of Default user profile when using with Active Directory.

New in Xlight FTP Server 3.9.1.6 (Mar 14, 2020)

  • Fixed a bug that create database table for logging file transfer failed for MS-SQL server.
  • Fixed a few minor bugs.

New in Xlight FTP Server 3.9.1.5 (Jul 2, 2019)

  • Fixed a bug that when upload in SFTP, uploading file is not locked from download

New in Xlight FTP Server 3.9.1.2 (May 9, 2019)

  • Fixed a bug in uPnP.

New in Xlight FTP Server 3.9.1 (Jan 15, 2019)

  • Add support for importing RSA SSH2 host key more than 1024-bit.

New in Xlight FTP Server 3.9.0 (Oct 18, 2018)

  • Add option to use separate SSL certificate in virtual server.
  • Fixed several GUI related bugs.

New in Xlight FTP Server 3.8.9.1 (Jun 6, 2018)

  • Fixed a bug that saved Xlight Main Windows position is displayed off the screen after reducing remote desktop display resolution.

New in Xlight FTP Server 3.8.9.0 (Apr 30, 2018)

  • Add a new column real_path in ODBC database file transfer log to record the real Windows path for transfered files. Existing users, who want to use this column, need to click "upgrade" button in ODBC file transfer settings to add this column to database table.
  • Add two options "Force login using SSL" and "Force to use encrypted data connection" in FTP user settings.
  • Save current Xlight FTP Main Windows postion when exitting.
  • Fixed a bug that Admin Console sometimes cannot be showed when Xlight FTP running as system service.

New in Xlight FTP Server 3.8.8.6 (Dec 11, 2017)

  • Fixed a bug in SFTP for user disk space quotas.
  • Fixed a bug in SFTP that user cannot remove folder after setting file allowed access.

New in Xlight FTP Server 3.8.8.5 (Jun 16, 2017)

  • Fixed a bug in selecting group size for SSH Diffie-Hellman Group Exchange
  • Add support to select a program to execute after user logged in
  • Fixed a GUI bug in UNC path impersonation
  • On screen log will automatically scroll to the end

New in Xlight FTP Server 3.8.8 (Mar 13, 2017)

  • Add GUI to allow the users to select SSH ciphers wanted.

New in Xlight FTP Server 3.8.7.6 (Feb 13, 2017)

  • Fixed a bug in FTP MLST format.
  • Fixed a bug that the OK button of configuration dialog box cannot be seen in low resolution screen.
  • Fixed a bug in maximum user upload file size.

New in Xlight FTP Server 3.8.7.5 (Nov 14, 2016)

  • Add AES-CTR cipher for SSH/SFTP.
  • Fixed several minor GUI bugs.
  • Change to static linked program executable and can now run alone without Visual C++ runtime dll.

New in Xlight FTP Server 3.8.7 (Sep 26, 2016)

  • Besides the base DN, add "other search DN" option for Active Directory Authentication.
  • Allow character $ to be used in FTP user name.
  • Make a few small changes to Active Directory user login debug messages

New in Xlight FTP Server 3.8.6.1 (Aug 2, 2016)

  • Support float value for $file_size variable in email notification.
  • Fixed a bug that group name can not be the same with a user name.
  • Fixed a bug that entering SFTP license key needs to restart system service to activate.

New in Xlight FTP Server 3.8.6 (Mar 30, 2016)

  • Add SHA256 support for SSH transport of SFTP.
  • Make a change so that when mapping a user's AD groups to local FTP groups in Active Directory Authentication, the user's Primary Group in the AD will be checked first, See detail about this change in tutorial document.
  • Fixed a bug that when using other public key files list for SFTP public key authentication, only last public key file can work.

New in Xlight FTP Server 3.8.5.3 (Feb 9, 2016)

  • Fixed a bug where if a path is virtual path, the SFTP stat command will return "File not Found" error.

New in Xlight FTP Server 3.8.5.2 (Jan 11, 2016)

  • Fixed another compatible problem with WinSCP for SFTP version 6, when root virtual path is not set
  • Add an option to let FTP NLST command return "226 Transfer complete" instead of "550 File Not Found" on empty folder

New in Xlight FTP Server 3.8.5.1 (Nov 18, 2015)

  • Fixed a compatible problem with WinSCP for SFTP version 6.
  • Allow SSH_FXP_LSTAT and SSH_FXP_STAT to run in virtual path with only LIST permission for compatible with some SFTP clients.

New in Xlight FTP Server 3.8.5 (Oct 19, 2015)

  • Add option to set Allowed Active Directory Groups.
  • Fixed a bug in virtual path permission for SFTP/SSH2.
  • Fixed several small bugs.

New in Xlight FTP Server 3.8.3.6.2 (Mar 13, 2015)

  • Fix a ASCII mode conversion problem for text file uploaded through TLS.

New in Xlight FTP Server 3.8.3.6.1 (Feb 9, 2015)

  • Fix a client compatible problem for SSL client authentication for TLS 1.2.

New in Xlight FTP Server 3.8.3.6 (Dec 6, 2014)

  • Fix a directory list bug in TLS 1.2.
  • Fix a compatible problem in creating file transfer log in database for SQL server.

New in Xlight FTP Server 3.8.3.5 (Nov 27, 2014)

  • Add feature to write the current virtual server users connection detail to a file and update the file periodically.
  • Add flags to support TLS 1.1 and TLS 1.2 for SCHANNEL. To use them, Xlight must run from Windows 7 or Windows 2008 R2 and above with Windows OS supporting TLS 1.1 and TLS 1.2.
  • Increase the limit of IP deny and allow list from 200 to 1000 for virtual server or global option.
  • Fixed a bug in the path string when install Xlight as system service.
  • Fixed a bug in displaying error log for remote administration client.

New in Xlight FTP Server 3.8.3.1 (Sep 23, 2014)

  • Add an new virtual server option to work with FTP client using Windows-style backslash in FTP path.

New in Xlight FTP Server 3.8.3 (Jul 10, 2014)

  • Fixed a memory leak problem with Active Directory.
  • Enabled TCP_KEEPALIVE option to Active Directory connection
  • Fixed a few bugs in disk quota.

New in Xlight FTP Server 3.8.2.5 (Jun 10, 2014)

  • Fix a SFTP/SSH2 compatible problem with cuteFTP 9.

New in Xlight FTP Server 3.8.2 (Apr 22, 2014)

  • Fixed the Xlight UPnP compatible problem with many home routers.
  • Fixed a few bugs related to UPnP port forwarding when running FTP server behind home routers.
  • Add TCP keepalive for FTP and SFTP/SSH2 control connection to detect dead peer connection.

New in Xlight FTP Server 3.8.1 (Apr 5, 2014)

  • Add support for multiple public key files for SFTP/SSH2 user public key authentication
  • Add support for option to set home folder permission in default user profile of external authentication

New in Xlight FTP Server 3.8.0.2 (Jan 9, 2014)

  • Fixed two 64-bit binary crashing problems when access user detail or FTP session log from GUI windows.
  • Fixed an inconsistent behaviour in user and server level IP deny list.
  • Enabled TCP_KEEPALIVE option to LDAP connection to fix a problem that connection stays in CLOSE_WAIT state after closing.
  • Add logging for SSH2_FXP_CLOSE command.

New in Xlight FTP Server 3.8 (Aug 13, 2013)

  • Add support for 64-bit binary for 64-bit platform
  • Add support for using MB as the unit for disk quotas
  • Add support for mapping AD primary group to local FTP group, when user logins through AD authentication

New in Xlight FTP Server 3.7.8 (Feb 15, 2013)

  • Fixed a SFTP compatible issue with SmartFTP

New in Xlight FTP Server 3.7.7 (Dec 15, 2012)

  • Add a new email notifcation event "OnWanIPChange" to notify user by email when the WAN IP beyond firewall is changed.
  • Fixed a memory leak problem when mode z function is enabled.
  • Fixed a bug that parameter $exclude_user does not work for OnLogin event of email notification.

New in Xlight FTP Server 3.7.6 (Nov 5, 2012)

  • Fixed a bug caused by port reuse when FTP server is behind firewall and set to use PASV port range with limited PASV ports.

New in Xlight FTP Server 3.7.5 (Oct 1, 2012)

  • Add the display for MD5 fingerprints of SSH host key in the server host key windows.
  • Improve the function for install service from Global Option. The Xlight service will start automatically after installing service.
  • Fixed a SMTP connection problem to Office 365 service for email notification.
  • Fixed a bug in ASCII mode conversion.

New in Xlight FTP Server 3.7.3 (Oct 1, 2012)

  • Fixed a problem in importing SSH host key.
  • Fixed a bug in user file access control.
  • Fixed a possible server crash problem when option "Delete file and directory to Windows recycle bin" is selected.

New in Xlight FTP Server 3.7.2 (Nov 14, 2011)

  • Add two ASCII mode related options.
  • Add option to show directory list output from FTP LIST command in IIS FTP or DOS DIR command output format.
  • Fixed a bug in SFTP, where a file opened by the first user will prevent other users from sharing and downloading this file.

New in Xlight FTP Server 3.7.1 (Sep 24, 2011)

  • Fixed a SSH client compatiable problem when closing SSH channel.
  • Fixed a FTP client compatiable problem when running LIST command with filename.
  • Fixed a bug in the APPE command.
  • Fixed a bug in the FTP session download/upload limit.

New in Xlight FTP Server 3.7 (May 16, 2011)

  • Add an option to enable SSH tunnel (Port Forwarding via direct-tcpip channel).

New in Xlight FTP Server 3.6.6 (Jan 17, 2011)

  • Enhanced the right-click menu for Xlight Main GUI Window, add a new option "Localization" to allow loading language file.
  • Fixed a crash issue when upload/download ratio and anti-leech protection are both enabled.
  • Fixed a few bugs in the FTP SITE command and allow show SFTP/SSH2 user info from FTP SITE command.
  • Fixed a $USERIP parameter bug for ODBC feature.

New in Xlight FTP Server 3.6.5 (Nov 8, 2010)

  • Add a server option to allow files or folders being deleted to Windows recycle bin.
  • Add an option to allow set LDAP filter for limiting user search scope.
  • In the email notification feature, two new variables "up_filelist" and "dwon_filelist" have been added to allow last 100 files uploaded or downloaded to be sent in the email content.
  • Remote administration client has a new command line option "-autoconnect" for to allow auto connect to FTP server.
  • Writing file transfer log to database feature has been enhanced to be more robust for the case when backend SQL server temperatorily out of service or shutdown.
  • Fixed two small bugs in the email notification
  • Fixed a small bug in the SITE command.

New in Xlight FTP Server 3.6.2 (Aug 27, 2010)

  • Add support for writing real virtual server statistics to file.
  • When virtual path comes from external authentication, using %username% variable for associated real path is supported.
  • When virtual path comes from external authentication, if associated real path does not exist when user logins, it will be created automatically.
  • Fixed virtual path deletion bug in SFTP.

New in Xlight FTP Server 3.6 (Jul 5, 2010)

  • Add virtual server option "Set bandwidth by IP address range" to allow setting different bandwidth by different IP ranges.
  • Fixed a path traversal bug for SFTP/SSH2.

New in Xlight FTP Server 3.5.5 (May 16, 2010)

  • Add support for sending log to Syslog server.
  • Add support for FTP MFMT command.
  • When upload file with SFTP, if the client doesn't set the file modification time, use current time as default time.
  • Remove the maximum 30 groups limit when matching local FTP group with AD group.

New in Xlight FTP Server 3.5.2 (Apr 12, 2010)

  • Fixed a bug of Xlight admin console management interface for non-console session of remote desktop.
  • Fixed a resource leaking bug for LDAP authentication.
  • Fixed a bug of access control list.

New in Xlight FTP Server 3.5.1 (Jan 1, 2010)

  • Fixed a SFTP/SSH2 crash problem.

New in Xlight FTP Server 3.5 (Nov 11, 2009)

  • Add support for creating virtual paths in the LDAP and Active Directory through a new attribute "ftpVirtualPaths" in the schema xlightFTPdUser.
  • Add a new SSL option "Force users to use encrypted data connection".
  • Add support for Openssh public key format in the SFTP/SSH2.
  • Increase the maximum value of FTP command speed from 255 to 1000. This will help to increase the speed of transfering large number of very small files.
  • Increase the maximum checked AD group of a user from 15 to 50, when his Active Directory group is checked and mapped to a same name local FTP group.
  • Fixed a bug in the public key authentication for SFTP/SSH2.
  • Fixed a bug in pausing virtual server.
  • Fixed a bug in access control list.
  • Fixed a few small bugs in the GUI.

New in Xlight FTP Server 3.4 (Sep 1, 2009)

  • Add support for multiple virtual paths in the ODBC database.
  • Fix a bug when writing file transfer log to database.
  • Fix a bug frequently loading ICMP.dll in WAN IP auto detection.
  • Fix a bug in the UPnP function when VMWare virtual network card exists in the system.
  • Fix a bug FEAT command output format.

New in Xlight FTP Server 3.3 (Jun 29, 2009)

  • Add four new parameters ($exclude_user, $exclude_file, $exclude_dir, $exclude_group) for e-mail notification configuration file.
  • Add a new option to overwrite exiting file when renaming.
  • Add support for ALLO command.
  • Change the error response code of CWD command from 450 to 550.
  • Fix a GUI bug in the connection detail.

New in Xlight FTP Server 3.2.5 (May 4, 2009)

  • Add support for default user profile to external authentication to allow quick setup of default user settings such as home directory.
  • Add option for output the directory list in Netware FTP Server format.
  • Allow the resizing of user and group list dialog box.
  • Provide read-only support for salted MD5 password. This allows importing users of salted MD5 password from other FTP servers, for example serv-U 6.x. Reading salted MD5 password only works for local FTP users, not users in database.
  • Fix a NLIST bug for empty directory when the option "NLIST Show Directories" is enabled.

New in Xlight FTP Server 3.2.1 (Mar 30, 2009)

  • Fix a SQL injection vulnerability for ODBC authentication.

New in Xlight FTP Server 3.2 (Mar 11, 2009)

  • Add support to call an external program after a file been uploaded, downloaded or deleted. The new option is in the [Virtual Server Config]->[File and Directory]->[File Transfer Options].
  • Add support to automatic backup config files after configuration change. The new option is in the [Global Option]->[General]->[Backup After Configuration Change].
  • Fix a in correct file path bug in the xferlog.
  • Fix a GUI bug related to advanced log filter.

New in Xlight FTP Server 3.1.5 (Jan 28, 2009)

  • Enhanced the support Active Directory group. When the group of a user in Active Directory is the same name of local FTP group, it will become his local FTP group.
  • When a local FTP group name changed, the group name of all local FTP users belong to it will be updated automatically.
  • Fix a crash problem when use ODBC database for SFTP.
  • Fix a client compatibility problem for SFTP.
  • Fix a bug that viewing Xlight Event from event viewer will crash Microsoft Management Console.
  • Fix a bug that the option "Don't use ODBC connection pooling" doesn't really take effect.

New in Xlight FTP Server 3.1.1 (Dec 2, 2008)

  • Fix a bug in the supported SSH2 authentication method string returned from server.

New in Xlight FTP Server 3.0.5 (Sep 26, 2008)

  • Add support to set passive mode port range and ip at virtual server level.
  • Add blowfish cipher to SSH2/SFTP.
  • Fix a timestamp bug in FTP command MLST.
  • Fix a response code bug in FTP command RNTO.
  • Fix a client compatibility problem for SFTP.
  • Fix a bug for IPv6 subnet mask.

New in Xlight FTP Server 3.0 (Aug 5, 2008)

  • Add support for SFTP(SSH2) protocol. In Xlight FTP Server, SFTP virtual server can now be created and managed the same way as FTP virtual server. The tutorial has steps to create SSH2/SFTP virtual server.
  • Add a new option "use NTFS permission for group path" for Active Directory users.
  • Add support that if the primary group is set for an Active Direcotory user, it will automatically become his FTP group.
  • When saving connection information for the remote administration, password can now be empty. If it is empty, user will be prompted for password after connection is established.
  • Xlight FTP Server verison information is now embedded in the executable file and can be showed in the Windows explorer.
  • Fixed a SSL/TLS compatible problem with FileZilla 3.1.0.1.
  • Fixed several bugs related to remote administration.

New in Xlight FTP Server 2.86.1 (Jul 22, 2008)

  • Another Admin Console bug is fixed in this version.

New in Xlight FTP Server 2.86 (May 12, 2008)

  • Fix a bug in the Admin Console that sometimes causes it taking long time to load and showing incorrect registration information.

New in Xlight FTP Server 2.85 (Apr 7, 2008)

  • Add support for using NTFS permission in the public path for Active Directory users.
  • Add a new option "Force all users except anonymous user to login using SSL" in virtual server's security settings.
  • Add support for CCC (Clear Command Channel) command.
  • Add a domain field in the UNC path account impersonation settings.
  • Fix a random crash problem cased by PASV command, when server was serving downloads for more than 3000 users at the same time.

New in Xlight FTP Server 2.835 (Mar 3, 2008)

  • Fix a bug that when used in the two quad-core Xeon processors platform, Xlight FTP Server will crash during startup.
  • Fix a bug in the PASV port range when option "Always use serve IP for PASV mode reply" is slected.

New in Xlight FTP Server 2.83 (Feb 4, 2008)

  • Add a new option "Message for IP address auto blocking" in the settings of "IP Address Auto Blocking".
  • Fix a LDAP authentication problem. Because in some LDAP servers, users with blank password can always authenticate(bind) successfully. Xlight FTP Server will now do special check to fail the LDAP authentication for users with blank password.

New in Xlight FTP Server 2.8 (Oct 22, 2007)

  • Add two new options in the external authentiction through LDAP.
  • Add two new events OnLogin and OnLogout, two new parameters and four new variables in the email notification.
  • When disk quota is enabled for a user, his quota will be automatically re-calculated after login. This will be eliminate the need to manually re-calculate quota from GUI.
  • Add options to set notes for virtual server and users.
  • Add option to force to use WAN IP or Server IP for virtual server behind firewall.
  • Add option to send debug trace informtion of external authentication to Error Log.
  • Add option to filter file transfer logs to database by download or upload.
  • Fix a GUI bug for selecting SSL server certificate.

New in Xlight FTP Server 2.60 (Apr 11, 2007)

  • support for authentication through LDAP Server. LDAP Server can use extended schema xlightFTPdUser for Xlight FTP Server related user settings.
  • support for Active Directory to use extended schema xlightFTPdUser for Xlight FTP Server related user settings.
  • support for writing file transfer log to database through ODBC.
  • support for email notification on some events happened in the Xlight FTP Server.
  • support UPnP function. It will be easier to configure Xlight FTP Server behind UPnP aware boardband routers.

New in Xlight FTP Server 2.40 (Jan 4, 2007)

  • Support for authentication through active directory. User can use
  • the same password of Windows Domain.
  • Support for UNC path impersonation, server can access remote network shares easily with different impersonation accounts.
  • Support for automatically log file rotation by date
  • Support for global IP deny and allow list
  • Add new "User Login" action in the advanced log options
  • Add ftp commands such as FEAT, MODE,OPTS ext. into the selection list for denying
  • FTP Commands
  • UTF8 is turned off by default. UTF8 can be turned on in the "[Virtual Server Configuration]->[Advanced]->[Encoding]->[Enable UTF8 Encoding]"

New in Xlight FTP Server 2.2 (Jul 5, 2006)

  • Support anti-leech protection. It can prevent ftp links from leeching by unauthorized people
  • Support MODE Z function.
  • Support UTF-8, UTF-8 can be turned on and off by OPTS UTF8 command.