all groups > iis ftp > february 2007 >
You're in the

iis ftp

group:

Virtual FTP directories with different ACLs doesnt work


Virtual FTP directories with different ACLs doesnt work vasal
2/16/2007 1:21:58 PM
iis ftp: Hi,
I have an IIS 5.0 server with two virtual FTP directories, each one
with two different ACLs (lists of IPs allowed access to). For example:
first ftp accepts connections from IPs A and B.
second can ba accessed from A, B and C.

When i connect to the second ip from address C i get an "530
Connection refused, unknown IP address" error.
This error doesnt occur if address C is added to the Acl of the first
FTP.
Seems that i can't set different acls for each virtual ftp.
Why? Any solution?

It is imperative to work with this senario. There are some other
security restrictions that may apply but i am asked to procede with
this design.



Thanx guys!
Re: Virtual FTP directories with different ACLs doesnt work .._..
2/19/2007 2:43:55 PM
You can't use IIS 5 for that then. IIS 5 does not distinquish per virtual
FTP user folder for the IP ACL.

It doesn't do what you want it to do. So if you MUST do that, you need a
server that can do that. There are third party FTP servers that can be used
on Windows.

If you can switch to different ports for each, you could use a separate
virtual FTP server and set IP ACL.

Or, use separate IPs for each and set it that way. (Which is what I do.)

A reverse proxy can probably do that, but that seems sort of like the long
way around.

[quoted text, click to view]

Re: Virtual FTP directories with different ACLs doesnt work Bernard Cheah [MVP]
3/1/2007 12:00:00 AM
Mmm... I don't have IIS 5 :) this is working correct at IIS 6.

if what you seems is valid, then I'm guessing you can create two ftp sites
as workaround.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button