Re: IIS 5, FTP, Different access permissions for different users

From: BB (Bernard_at_3exp.com)
Date: 03/26/03

  • Next message: David Wang [Msft]: "Re: Installation of Urlscan 2.0" 
    From: "BB" <Bernard_at_3exp.com>
Date: Wed, 26 Mar 2003 10:54:17 +0800

    Ok. not sure if I got you right this time.
    Say, you have 2 folders. outgoing and incoming
    both under E:\inetpub\ftproot\

    and you want to have anonymous access together
    with IP restricted 'intftp' login access, right ?

    anonymous and intftp access write is different, like
    you've mentioned.

    Ok. in this case, in your first try you are doing this correctly.
    because you have both user's NTFS permission correctly figured out.
    one thing i guess you don't need is the 'intftp' virtual directory.

    what you need is to create 2 ftp sites.
    say site1 -> anonymous access -> e:\inetpub\ftproot\
    this site restrict only that is NOT from 172.16.x.x and use anonymous

        site2 -> intftp access -> e:\inetpub\ftproot\
    this site only ALLOW login from network coming from 172.16.x.x and need
    auth.

    I believe you got the permission setup correctly, it's only
    the ftp IP restriction and the authentication.
    IP restriction will work if you configure correctly.

    side note: the above can be done using one site too. e.g. with 2
    different virtual directory serve as the access channel when user
    coming. same concept but using virtual directory method. 

    -- 
Regards,
Bernard Cheah
http://support.microsoft.com/
"David Elliott" <david.elliott@lifeway.com> wrote in message
news:ueEg6us8CHA.1740@TK2MSFTNGP12.phx.gbl...
> BB,
>
> Thanks for answering so quickly.
>
> My objective is to have internal users (IPs on 172.16.0.0 subnet) login
> in as intFTP ("internal FTP user") to write to outgoing folder and read
> from incoming folder, and allow anonymous users (from anywhere) to read
> from outgoing folder and write-only to incoming folder.
>
> I first tried one FTP site (Default FTP) Home directory
> E:\inetpub\ftproot containing outgoing and incoming folders (permissions
> set at NTFS level -- seems to work) with the virtual directory "intFTP"
> with Directory Security configured to deny access to all except
> 172.16.0.0 submask 255.255.0.0 also pointing to same path.
> Result: Anonymous users get correct permissions.  IntFTP users get
> correct permissions.
>
> Problem is that if you type: ftp://intFTP:password@ftp.domain.com in IE,
> it allows intFTP access regardless of your IP address -- like the
> 172.16.0.0. restriction is ignored.
>
> I tried making two FTP sites with different IPs on same machine,
> pointing to same home directory: one for Anonymous and other userids and
> one site just for intFTP with the intFTP Virtual Directory deleted from
> original default FTP site and created underthe new intFTP FTP site.
> Result: Can still login to default FTP site by typing
> ftp://intFTP:password@ftp.domain.com in IE (even from internet with
> client IP outside 172.16.0.0. range).
>
> I was surprized that I could login to Default FTP site as intFTP and get
> access to the incoming and outgoing folders since the intFTP virtual
> directory only existed on the other FTP site.
>
>
>
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!
  • Next message: David Wang [Msft]: "Re: Installation of Urlscan 2.0"

    Relevant Pages

    • Re: IIS 5, FTP, Different access permissions for different users
      ... namely intftp -> 'incoming', right? ... How To Set Up an FTP Site So That Users Log Onto Their Folders ... > I created a Virtual directory pointing to same path as ...
      (microsoft.public.inetserver.iis.security)
    • Re: FTP P
      ... I'm not really sure if I'm in user isolation mode, ... I run the IIS FTP Sites Wizzard to add a new FTP Site. ... that I defined previosly and have the full rights for this folder. ... If I delete the complete user, still delete for the other Virtual Directory. ...
      (microsoft.public.inetserver.iis.ftp)
    • IIS 5, FTP, Different access permissions for different users
      ... outgoing folder and read from incoming folder, ... I first tried one FTP site Home directory ... with the virtual directory "intFTP" with Directory ...
      (microsoft.public.inetserver.iis.security)
    • Re: require password
      ... go to command prompt and connect ftp locally ... i created a virtual directory IN MY FTP SITE, ftpDir, it points to ... in their website folder, ...
      (microsoft.public.inetserver.iis.ftp)
    • Re: FTP isolation mode and Virtual FTP Directories
      ... The only way to do this is to create a physical directory in the users area ... to match the virtual directory that you have created (Remember that the user ... You create a virtual directory at the root of the FTP site called ... that folder they see the content from "c:\inetpub\Directory1" ...
      (microsoft.public.inetserver.iis.ftp)