Allowing Anonymous write access only.

From: Phill:J (phillj_at_gmail.com)
Date: 11/08/04 

Date: 8 Nov 2004 08:37:30 -0800

Hi

I currently have an NT4 server running an old version of IIS, this has
been set up so that anonymous FTP users have write access only, this
may seem insecure and we do get a certain ammount of hackers or
taggers testing the system by dropping test files and folders onto the
server, but because anonymous users do not have read access they soon
find that they cannot download anything they upload and go elsewhere.

Due to the demise of NT4 Support at the end of the year we are
currently replacing all our NT servers with either Win2000 or, as in
this case, Win 2003 Servers. This is where my problems have started,
I initialy replicated all the IIS setting and NTFS permission from my
NT box on my 2003 box but so far have been unable to achive the same
result, it appaers that I can only grant anonymous write access if I
grant read access as well, I've tried every different configuration I
can think of but come to the same conclusion.

The message I get on the screen when only write access is enabled
(useing NTFS permissions) is "cannot log in, home directory
inaccessible, Anonymous login failed."

If I enable read and write access I can login OK, write data and then
read it as well (as expected).

Can any one advise how I can set up FTP on my 2003 so that anonymous
users can only write data but cannot list or read anything ?

Thanks in advance.

Phill J.
Torbay,
Devon,
UK

Relevant Pages

  • Anonymous FTP write access only.
    ... I currently have an NT4 server running an old version of IIS, ... been set up so that anonymous FTP users have write access only, ...
    (microsoft.public.inetserver.iis)
  • [NT] Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise
    ... This patch eliminates a newly discovered vulnerability affecting Internet ... in IIS 4.0 and 5.0, and could likewise be used to overrun heap memory on ... allowing code to be run on the server. ... * Microsoft has long recommended disabling HTR functionality unless there ...
    (Securiteam)
  • Re: Problem with connect computer wizard
    ... Make sure the Windows XP client is pointing to the SBS 2003 server as ... Please collect the IIS metabase and the latest IIS log files further ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
    ... IIS key to an Intel SSL acelerator ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
    (Focus-Microsoft)
  • Re: SBS 2003 After Service Pack 1 for SBS
    ... we can conclude the SBS 2003 SP1 has been applied ... Please help me collect the IIS metabase to check ... and using server management console to reproduce the problem. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
Loading