Re: Correct FTP Security settings on IIS?

From: David Cur. (davidcurtis20@hotmail.com)
Date: 06/06/02


From: "David Cur." <davidcurtis20@hotmail.com>
Date: Thu, 6 Jun 2002 11:47:30 +0200


So, what is the best security method?
windows username and password will be sent in clear text as well :(

Thanks

"Matt Barton" <nerd@netmonkey.net> wrote in message
news:20020605205244.R257-100000@jupiter.homeunix.net...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, 5 Jun 2002, David Cur. wrote:
>
> > I'm wondering what is best practice for FTP security, I was told that a
> > Windows username and password shouldn't be used, and I should leave the
> > "Allow only annoynoumous connections" option. I can see why we wouldn't
> > like a username and password to travel with my cuteftp program, but
> > what's the second option? enabling everyone to upload? what about quota?
> > should I consider that?
>
> If you allow anonymous users to upload to your publicly accessible FTP
> site, you will suddenly find yourself with little hard drive space on that
> server because someone will find it and put warez on it.
>
> - --
>
> Matt Barton nerd@netmonkey.net
> Indianapolis, IN http://www.mattbarton.ws/
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.7 (FreeBSD)
>
> iD8DBQE8/sDB0MGobtNQgm0RAnlWAJ4loynrAGbMSQ4bvYC1t49jjQAIwgCgiOLI
> HlsM9Tom+f2xYPegpXW/E0M=
> =Yil7
> -----END PGP SIGNATURE-----
>
>