Re: need to assign different ports for ftp user accounts

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 08/09/04


Date: Mon, 09 Aug 2004 19:46:26 GMT

On Mon, 9 Aug 2004 08:10:45 -0700, "Joe"
<anonymous@discussions.microsoft.com> wrote:

>Greetings everyone,
>I have Small Business Server 2003 standard edition. I am
>using 2 builtin nic's for connectivity to WAN & LAN with
>the builtin SBS firewall for NAT. I have a static IP for
>the WAN. I am trying to create several FTP sites for
>individual users to logon via there "domainname\username
>with their password".How do I create a different FTP port
>besides the default "21" for them to logon with, so I can
>have them logon "staticipaddress:portnumber" and use their
>user account parameter to authenticate,

Create the FTP site and assign it to the preferred port.

> or is their an
>easier way??

Easier way to what? Have each user have a different FTP home
directory? Absolutely.

INFO: FTP Site Administration Documentation in IIS 6.0:
http://support.microsoft.com/default.aspx?scid=kb;en-us;814865

Especially:

Isolating FTP Users:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/wsa_ftp_isolate.asp

> Also, why do I NOT want to use my SBS2K3 as
>an FTP server??

Because a hacker that gained control of it could use it as a WaReZ
repository.

>I am checking the event logs daily for any
>successful logon attempts. I have anonymous logon
>unchecked on the Default FTP site node.I see some hackers
>try to break the passwords but I have made them at least
>10 characters and complex. Any suggestions would be
>appreciated.

Basic security. If a user doesn't need access except from a specific
range of IP's. block those in a firewall or use an ISA rule.

Jeff



Relevant Pages

  • Unable to access FTP site unless user is a member of admins group...
    ... I have a windows 2000 Small Business Server on which I have configured a ... The FTP site home directory is located on the same ... All users can access and view the folder contents internally using the share ... I have a username set up called "ftpuser" that I want all ...
    (microsoft.public.inetserver.iis.ftp)
  • Isolation problem
    ... I've created an FTP site in isolation mode (Small Business Server 2003). ... Submaps LocalUser with map willy and Public are created. ...
    (microsoft.public.inetserver.iis.ftp)
  • FTP resolving
    ... I've turned on my FTP settings in Windows 2003 Small business server. ... I can't get into the ftp site. ...
    (microsoft.public.inetserver.iis.ftp)
  • Secondary FTP Site setup problem
    ... I create secondary FTP site and using port 8080. ... After I logon, all files on ftp server folder can ...
    (microsoft.public.windows.server.general)
  • Secondary FTP site setup
    ... I create secondary FTP site and using port 8080. ... After I logon, all files on ftp server folder can ...
    (microsoft.public.windows.server.setup)