FTP Isolation in IIS 5? -- iis ftp

iis ftp : FTP Isolation in IIS 5?

Fernie
11/8/2004 6:41:07 AM

I recently eliminated the use of dedicated IPs by using host headers on my
webserver to host multiple domains. After I was all done, I realized that
FTP no longer worked since each domain relied on its own IP address.

I followed a very useful link that Bernard had posted below:

How To Set Up an FTP Site So That Users Log Onto Their Folders
http://support.microsoft.com/?id=201771

I was able to allow users to log into their own folder. What I would really
like to do now is to prevent users from navigating up to the root and seeing
other directories (even though access is restricted by folder permissions).

Can someone please provide a suggestion or point me to an applicable article
explaining how user isolation in IIS could be accomplished?

Thank you very much,

Fernie

--

Fernie
11/8/2004 7:52:28 AM

Hi Bernard,

Before this post, I had missed a response that you posted earlier.

I am using physical, not virtual directories to store domain data and most
of these domains also run isapi dlls and cgi executables.

Looking at the instructions on virtual directories, it appears to me that it
is too late for me to convert to virtual domains without lots of work and
website disruptions.

Are there good 3rd party FTP servers that would provide isolation even
though I wish to use the same ip and port? How about a system that allows
end users to upload using HTTP since host headers are supported?

Can you or someone offer a suggestion so that I can obtain complete user
isolation like I had before when using a dedicated IP for each domain?

Thanks in Advance,

Fernie

--

Fernie
11/8/2004 3:34:23 PM

Thanks very much for your response.

Regards,

Fernie

[quoted text, click to view]

--

Bernard
11/8/2004 4:14:23 PM

The isolation provided by IIS 5 is a workaround not a real isolation, hence
to hide the user folder, we use 'virtual directory', next I'm not sure about
other ftp server, but you can try google.com. And I have not see one ftp
server that support the so called 'host header' in ftp world.

In your case, even though user able to 'cd ..' and navigate to the ftproot
directory, without proper NTFS permissions, userA will not be able to access
userB folder.

To achieve full user isolation via IIS FTP, you need IIS 6 running on W2k3.
or else, then you need new IP for each ftp site.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/

[quoted text, click to view]
http://www.atozedsoftware.com

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis ftp

home · blog · groups

Questions? Comments? Contact the dn