FTP External Intranet Access

Tech-Archive recommends: Fix windows errors by optimizing your registry

I am hoping that someone can clearly explain why I should not host an FTP on
my SBS 2003 box.
As well I need an explanation why I should not allow my intranet to be
acecssible over the internet.

I understand that FTP passwords go in clear text but if I lock down the FTP
to one directory and its sub folders why not do it.

For years I have just taken this as a given: DO NOT HOST FTP on SBS 2003.
It sounds like a no brainer to not host FTP on a domain controller.
but
the other day a senior (read smarter than I) technical lead said "How does
it pose a risk?"
I was at a loss for a good detailed explanation.

Can you help me?

liam
.

Relevant Pages

  • Re: custom, network install server
    ... > Has anyone ever managed to use the theoretical install from host to host ... > useradd -m swadmin ... > On the new box I can ftp oldbox and log in as swadmin no problems ...
    (comp.unix.sco.misc)
  • Re: SYSCONF and FTPIT jobs
    ... belonging to the 192.168/16 netblock and is connected to the ftp host via ... I also have concerns about the generated ftpin file. ... 200 PORT command successful. ...
    (comp.sys.hp.mpe)
  • Re: Can you use an FTP program with dial-up???
    ... > of them mention that they support FTP as opposed to BROWSER support. ... Yes you can use FTP upload to your web site if the host supports FTP, ... Since both methods involve use of the same connection from your ...
    (alt.html)
  • Re: no index files appearing in ftp when publishing website
    ... I didn't actually get a response but my host company were able to resolve ... "DavidF" wrote: ... instead of smart ftp but I had no joy with that either. ... 2002 of Publisher": ...
    (microsoft.public.publisher.webdesign)
  • Re: ISA - Block External IP from Accessing Server
    ... This helps to reduce the attack surface of your server by eliminating any foreign host from accessing your system unless explicity allowed. ... On the right side of the window under "Firewall Policy Tasks" click "Create a new Access Rule" ... Expand the "All Protocols" tree and select "FTP". ... Instead of setting a DENY action, set an ALLOW action and provide the source IP of those hosts you WANT to access the FTP server. ...
    (microsoft.public.windows.server.sbs)