Re: FTP security

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: SuperGumby [SBS MVP] (not_at_your.nellie)
Date: 08/10/04 

Date: Wed, 11 Aug 2004 09:07:57 +1000

best way is to use a different program than IIS to run the FTP (serv-u or
ws_ftp server come to mind)

both programs support using either AD or their own user accounts. If you use
their own user accounts the user doesn't exist in AD so therefore has no
windows priveleges.

"MC" <MC@spammenot.com> wrote in message
news:e4YXmiifEHA.2764@TK2MSFTNGP11.phx.gbl...
> The server is behind a firewall and router using port forwarding. Is
> there
> any way of acheiving my goal of a user account for FTP access and only FTP
> access, no other rights?
>
>
> "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
> message
> news:eTtQNYifEHA.1652@TK2MSFTNGP09.phx.gbl...
>> When having port 21 open (needed for FTP), you open up your server for
>> the
>> whole world. Password are being sent in clear text, not encrypted.
>> RWW: Remote Web Workplace.
>>
>> --
>> Regards,
>>
>> Marina
>> Microsoft SBS-MVP
>>
>> "MC" <MC@spammenot.com> schreef in bericht
>> news:efYwHNifEHA.2604@TK2MSFTNGP10.phx.gbl...
>> > The ftp site is for clients to download software updates. My ideal
>> outcome
>> > is that we have a username / password that can be given to clients and
>> > changed as/when required to control access. Our www site is externally
>> > hosted so cannot use that to distribute updates easily.
>> >
>> > Not sure what you mean Marina, funny files? and RWW?
>> >
>> >
>> > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
>> message
>> > news:%23oPHdFifEHA.3612@TK2MSFTNGP12.phx.gbl...
>> > > Hi MC,
>> > >
>> > > Never heard of those servers that got all kinds of funny files that
> they
>> > > couldn't delete? Why would you need ftp anyway on your server? Use
>> > > RWW
>> for
>> > > your users, or VPN in.
>> > >
>> > > --
>> > > Regards,
>> > >
>> > > Marina
>> > > Microsoft SBS-MVP
>> > >
>> > > "MC" <MC@spammenot.com> schreef in bericht
>> > > news:OBQQb8hfEHA.3700@TK2MSFTNGP12.phx.gbl...
>> > > > It is, why don't we want that?
>> > > >
>> > > > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote
>> > > > in
>> > > message
>> > > > news:%230QYz6hfEHA.3988@tk2msftngp13.phx.gbl...
>> > > > > Hi MC,
>> > > > >
>> > > > > Is your SBS server acting as a FTP-server???? You don't want
>> > > > > that.
>> > > > >
>> > > > > --
>> > > > > Regards,
>> > > > >
>> > > > > Marina
>> > > > > Microsoft SBS-MVP
>> > > > >
>> > > > > "MC" <MC@spammenot.com> schreef in bericht
>> > > > > news:uwjbp5hfEHA.712@TK2MSFTNGP09.phx.gbl...
>> > > > > > How can I assign a standard username / password to allow FTP
>> access.
>> > > > What
>> > > > > > is the minimum a user needs in terms of rights to access the
>> > > > > > FTP
>> > > server.
>> > > > > I
>> > > > > > have turned of anonymous access.
>> > > > > >
>> > > > > > Thanks in advance guys!
>> > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > > >
>> > >
>> > >
>> >
>> >
>>
>>
>
>

Relevant Pages

  • Re: FTP - User login
    ... So ftp component will be the server you connecting to. ... >>> to create new users in the user accounts. ... >>> It brings the user login menu up, and I tried turning this off by ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: FTP server (W2k)
    ... How many Virtual Directories are we talking about? ... There is no predetermined limit for the number of local user accounts and I ... will be the spec of your server as each of these will take up hard disk ... The main thing to keep in mind when using FTP is that it is an inherently ...
    (microsoft.public.win2000.active_directory)
  • Web client and FTP
    ... Serv-u ftp server. ... List Folder for these two accounts). ... >Deny Write to the above user accounts! ...
    (microsoft.public.inetserver.iis.security)
  • Re: Backup and restore sam database
    ... I have about 100 ftp users who logs in to the ftp ... > server for downloads. ... > want to recreate all those user accounts. ...
    (microsoft.public.win2000.networking)
  • Help with IPFW + NATD + Passive FTP
    ... passive FTP connections through IPFW with NATD enabled. ... $cmd 005 allow all from any to any via dc0 ... # Interface facing Public internet ... # Allow out access to my ISP's Domain name server. ...
    (freebsd-questions)