Groups | Blog | Home
all groups > iis ftp > september 2005 >

iis ftp : FTP Security


sanj
9/18/2005 11:46:08 AM

Hi,

Just want to know how to make ftp access secure:

- should I create another ftp folder outside the Inetpub folder t
redirect the user to when using ftp?

- only allow administrator access to FTP (so make user part of the
administrator group)

Anything else?

Also I use a asp upload script to upload files to a director
db/uploads what sort of permissions should be assigned to thi
directory?

Thanks,

San


-
san
-----------------------------------------------------------------------
Posted via http://www.webservertalk.co
-----------------------------------------------------------------------
View this thread: http://www.webservertalk.com/message1205674.htm
Bernard Cheah [MVP]
9/19/2005 12:00:00 AM
Errr... for authentication you can create a windows user and control the
access via NTFS. however IIS FTP doesn't offers any mean of security, hence
you need to secure the connection itself.. e.g. via vpn or ipsec. some
useful kb for you to read
HOW TO: Limit FTP Access in Windows 2000
http://support.microsoft.com/?id=318712
HOW TO: Create a Secure FTP Directory that Uses Password Authentication
http://support.microsoft.com/?id=239120
Information About the IIS File Transmission Protocol (FTP) Service
http://support.microsoft.com/?id=283679


As for your script permission, the request/process identities (users) need
to have at least WRITE permission on the target folder.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Scott
10/3/2005 9:14:51 AM
You might look at our ftp SSL secure wrapper. It has the ability to
admit only those users (via our freeware client wrapper) that have a
cert authority in the server wrapper's db. Very secure.

Ed E.
TCP Data
www.tcpdata.com



[quoted text, click to view]
AddThis Social Bookmark Button