Groups | Blog | Home
all groups > iis ftp > october 2005 >

iis ftp : FTP P


jan
10/21/2005 12:05:01 AM
Hi, I create two FTP sites on the IIS 5.0. And first FTP site port 21, and
second FTP site port 4999. And also i create 3 virtual directory in the
second FTP site.

We use ADSL internet connection. I open these ports from ADSL modem to reach
these FTP sites from WAN. First FTP site which use 21 port is OK, its
working. But second FTP site can be reached, and ask username and passsword.
When user login to second FTP site which gives this error :

But if i try to reach second FTP site from LAN, there is no problem.

Error :

An error occurs when try to open folder,

Details:
200 Type set to A
500 Invalid PORT command
Bernard Cheah [MVP]
10/24/2005 12:00:00 AM
Typical NAT issue.
FTP Error: 500 Invalid PORT Command
http://support.microsoft.com/?id=281193

Why not just 1 ftp sites with many virtual directories ?
and control access via NTFS ?

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

jan
10/24/2005 2:23:04 AM
Okey, i did virtual directories in the 1 ftp site. but now in this ftp site,
has 4 virtual directories. 1 vir.dir can be written everyone, no login
required. But other 3 vir. should be accessed by password and username. How
can i do settings for this ?
Now, every virtual directories accessedby evryone.

Thank you for your help.

[quoted text, click to view]
jan
10/24/2005 3:02:02 AM
Okey, i use 1 FTP site and it has 4 virtual directories. But i would like to
do that 1 virtual directiory can be accessed by erveryone but other three
virtual directories should asked username and password ! How can i do that ?

Thank you for your help.

[quoted text, click to view]
Javier
10/24/2005 1:45:24 PM
Hi Bernard:

I want to know how is possible to control the virtual directories via ntfs?

I have some like Jan, one Ftp site via 21 port, and need to create another,
but I want to use the same port.

Thanks,

Javier Salvatierra

"Bernard Cheah [MVP]" escribió:

[quoted text, click to view]
jan
10/25/2005 1:56:03 AM
Thanky you for your help...

[quoted text, click to view]
Bernard Cheah [MVP]
10/25/2005 10:35:19 AM
If you like to have 2nd site on the same port, then you need addtional IP
address.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Bernard Cheah [MVP]
10/25/2005 10:47:09 AM
In a simple way - you can have
a) setup the ftp site with anonymous access. (this will take of the 1st vir
dir for everyone access)
b) create 3 users -
How to create a security-enhanced FTP directory that uses Password
Authentication
http://support.microsoft.com/?id=239120
HOW TO: Limit FTP Access in Windows 2000
http://support.microsoft.com/?id=318712

next, create the 3 virtual folder and mapped to any path you want.
e.g. user1 -> d:\ftp\user1
bla bla
then for d:\ftp\user1\ folder, remove all default ntfs, grant
system/adminsitrat/user1 full control.
same for user2/3.

In this setup, anonymous user will not be able to navigate to user1 folder
and user2 will not able to go to user1 and vice versa.
if user3 need to access to user2 folder, just grant access to user3 at user2
NTFS ACL lists.


--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Javier
10/25/2005 10:52:11 AM


[quoted text, click to view]
Javier
10/25/2005 11:30:03 AM
I doit the next:

Created a Folder, called WebSites

Into this Folder 2 New Folders, Futsal and Solinme

I gived the user Futsal to Futsal with Full Control,

I gived the user Solinme to Solinme With Full Control.

When I tried to browse directly in the IIS Manager, ask me the user and
password and is
imposible to log on the Virtual Directory (VD) in both of them.

I execute FTP.EXE www.solinme.com in the CMD prompt and give me the 530 Error,

I need to resolve this problem.

I'm using Windows Server 2003 Web Edition.

Best Regards,

Javier Salvatierra.


[quoted text, click to view]
Bernard Cheah [MVP]
10/26/2005 12:00:00 AM
I assumed you have created a ftp site, not web site.
what's the full 530 error msgs? see if this help.
Err Msg: 530 User <Username> Cannot Log In. Login Failed.
http://support.microsoft.com/?id=200475

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Javier
10/26/2005 8:16:04 AM
Yes, Bernard I have created a ftp site, I want to my different website users
have access trought the ftp to they can make changes in it, that's the razon
to the name "Websites".

In my Windows Server 2003 Web Edition, I run the MMC and I search for the
"Group Policy" and it not exist, the only I have is "Group Policy Object
Editor"

I add this "Group Policy Object Editor" and I search for the Policy "Log on
locally" and it not exist.

The complete error is "530 User solinme cannot log in, home directory
inaccessible.
Login failed"

I'm trying to use the "Isolate", but when I use "Not Isolate" the FTP works
fine, but I need that the users can't see the folders each others.

Best Regards,

Javier Salvatierra.


[quoted text, click to view]
Javier
10/26/2005 8:26:25 AM
The Policy that I have is "Allow log on locally" and I have in it:

Administrators
Backup Operators
IUSR_SOLINME-SERVER
Power Users
solinme--->added by me an is administrator
Users.

Javier

[quoted text, click to view]
Javier
10/26/2005 1:34:09 PM
I resolved all the problem, and isn't easy that I was thinking. I have to
create folders like LocalUser and Public, and Users in the FTP folder.

Only a question, how is possible that ask the user and password for a user
when I access the FTP over the Internet?, someting like
ftp:\\solinme.com\user:xyz,password:zyx and not over the File, Log On As?.

Thanks for your help.

Javier Salvatierra

[quoted text, click to view]
Bernard Cheah [MVP]
10/27/2005 12:00:00 AM
Yes. it the to have the folder name convention. Refer
How To Set Up Isolated Ftp Site
http://support.microsoft.com/?id=555018

Auto login via browser? you can try
ftp://username:password@ftp.yourserver.com

Take note, the password will be visible with http link. etc.


--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Javier
10/27/2005 9:08:03 AM
Thanks Bernard, you help me very much.

Another problem is that when I go to the FTP site with some user, example:

XYZ have permision to enter to his respective virtual directory, and I enter
with his user and password, when I refresh or update the site with F5 or the
respective key in the browser, the other Virtual Directories are visibles and
I can access to the others users.

How can to prevent the access to the LocalUser Folder?

Thanks for your help.

Excuse me my English, but I prefer this Newsgroup, others is very slow the
answer.

Javier Salvatierra
Costa Rica



[quoted text, click to view]
Veronica K
10/27/2005 11:18:06 PM

hi, my Name is Veronica, I am new ti computers. I wanted to know how to
create FTP sites
[quoted text, click to view]
Bernard Cheah [MVP]
10/28/2005 12:00:00 AM
Start here,
How To Set Up an FTP Server in Windows 2000
http://support.microsoft.com/?id=300662



--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Bernard Cheah [MVP]
10/28/2005 12:00:00 AM
Are you really in user isolation mode? if yes, user xyz will be directed to
userxyz folder and that would be the ftproot, he/she can't navigate to other
folders. if the ftp site has virtual directory, by default those are hidden.
and can't be see in directory listing.

So, double check your ftp site mode.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Javier
10/28/2005 1:56:04 PM
I'm not really sure if I'm in user isolation mode, because the users can see
the different folders.

Let me explain wath is that I do:

1. I run the IIS FTP Sites Wizzard to add a new FTP Site.
2. I choose the FTP User Isolation, and then I mark the second choice,
Isolate users
(Users must be assigned an FTP home....etc.)
3. I enter the path, in my case C:\FTPSITES
4. I give only the Read Permissions.

Then:

1. I create the Virtual Directory in this FTP and enter the path
C:\FTPSITES\LOCALUSER
2. In the C:\FTPSITES\LOCALUSER exist a folder called FUTSAL that is a user
that I defined previosly and have the full rights for this folder.
3. In this Folder exist other folder called SOLINME and still have the user
SOLINME with full rights for this folder.

When I see the permissions in the IIS FTP Sites, my FTP new site, my Virtual
Directory new SOLINME have the permissions of FUTSAL, and viceversa.

If I delete the complete user, still delete for the other Virtual Directory.

If I change the FTP site Directory in the FTP Sites, my FTP site, to another
path, like C:\FTP's, the users can't access the FTP Virtual Directory, ask me
the user and password and I give that and do not enter.

What's I do wrong?, I'm frustrate....

Thanks a lot.

Javier


[quoted text, click to view]
Javier
10/28/2005 2:17:03 PM
I do it at least!!!!

Thanks my error was very simple:

The Path of the Virtual Directory was C:\FTPSITES\LocalUser, but when I
changed to the respective user it work fine...

I'm very happy now!.

Javier Salvatierra

[quoted text, click to view]