Re: FTP Server on SBS: How bad an idea?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 03/13/04 

Date: Fri, 12 Mar 2004 20:56:17 -0800

IMO the critical factor isn't whether your accounts are
local or Domain because if you're enabling OWA, VPNs or
other Internet access to company resources you're already
exposing your Domain accounts...

The main difference is how protected your credentials are,
and <all> normal FTP use easy to crack Base64.

Tony Su

>-----Original Message-----
>IF you must enable FTP, do yourself a favour and use a
dedicated FTP
>program, Serv-U/WFTPD/WS-FTPServer rather than IIS's FTP
server.
>
>As SBS is a DC you cannot create local machine accounts,
therefore the IIS
>FTP must be tied to domain acounts. BAD.
>
>Any of the above servers support their own account
database (or can use AD
>if you're abso-&^%$*&^-lutely crazy).
>
>"Javier Gomez [SBS MVP]"
<javier_gomez@remove.this.engineer.com> wrote in
>message news:#9Dfw#7BEHA.3804@TK2MSFTNGP09.phx.gbl...
>> I think is a bad idea. You can check for old posts in
the SBS2k NG for
>> people that had security problems with it (folders that
can't be deleted,
>> sites hacked and stuffed with rare files, ect.). I know
that was IIS5.0
>and
>> this is IIS6.0... but I still don't feel confortable
doing it (IMHO-> is
>> worse than hosting a site).
>>
>> If you can host it externally (for very little money)
why do it this way?
>> Plus... less bandwidth is required!
>>
>> My $0.02
>>
>> --
>> Javier [SBS MVP]
>>
>> << SBS ROCKS !!! >>
>>
>> "Jose" <anonymous@discussions.microsoft.com> wrote in
message
>> news:877b01c407bc$6ba8b0c0$a601280a@phx.gbl...
>> > We have pretty large files that can't feasibly be
sent via
>> > e-mail. The next best thing is to put them on an FTP
site
>> > for our clients to download at their leisure........
>> >
>> > Since we'd like to keep our SBS2K3 Std. server nice
and
>> > clean, how bad an idea is it for us to instal FTP
service
>> > on the machine?
>> >
>> > If it's not an issue I would think it would be a
default
>> > setting instead of having to install it from the CD...
>> >
>> > Your thoughts?
>>
>>
>
>
>.
>

Relevant Pages