Re: Ftp server a bit more secure ?

From: Aaron Zirbes (ajz@cccs.umn.edu)
Date: 10/05/01


Message-ID: <006901c14db1$1494a2c0$01e05ea0@sprite>
From: "Aaron Zirbes" <ajz@cccs.umn.edu>
To: "Focus on Microsoft Mailing List" <FOCUS-MS@securityfocus.com>
Subject: Re: Ftp server a bit more secure ?
Date: Fri, 5 Oct 2001 10:19:08 -0500

Consider running an sftp server. (FTP over SSH).

Much more secure.

Aaron Zirbes
System Administrator
EOH Health Studies
University of Minnesota
ajz@cccs.umn.edu

----- Original Message -----
From: "Frédéric Médery" <fmedery@sympatico.ca>
To: <focus-ms@securityfocus.com>
Sent: Thursday, October 04, 2001 6:25 PM
Subject: Ftp server a bit more secure ?

: Hello everybody,
:
: I have to set a FTP server on a DC ! I know it's stupid but I'm not the
: one who decided :-) And I have to disable anonymous access !
:
: What I did :
: Fully patched the Server
: Installed IIS on a different partition.
: Created a group called Web Designer
: Created user who's not member of domain user group (just of web designer
: group). To remove the domain user group, I set the Web designer group as
: the primary group.
: The IIS partition is only available for web designer and the iis admin
: group.
: Of course the users have log on locally.
: I create one ftp root folder and some virtual directory that are not
: childs of the ftp root. So users are unable to see other folder even if
: they try to go to the root of the ftp site.
:
: Can this be a more "secure" or less dangerous ftp server ? Is it good to
: remove the ftp users from the domain user group ?
: If you have some advice :-)
:
: Thank you,
: This ML is one of the best
:
: Have a nice day
:
: Fred
:



Relevant Pages

  • Re: Microsoft FTP Server problem on W2K?
    ... It is a UNISYS ClearPath mainframe system that is trying to FTP using ... passive mode to a MS FTP server. ... Currently the mainframe FTPs in ACTIVE mode. ... Since the mainframe pushes files to our customers over a WAN connection, ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP
    ... >from a website to my computer VIA ftp. ... but who knows if your ftp server supports any of those ... service doesn't have any secure options, meaning the ftp session cannot be ... 1) have your designer fetch the database using ssl. ...
    (comp.security.misc)
  • RE: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: vsftpd beginners tutorial?
    ... # This file was created to illustrate the steps needed to create a new FTP ... Why vsftpd as this FTP Server? ... System software customization considerations. ... User and Group Configuration ...
    (RedHat)