Security

Ask something
Discussion Locked

IIS 5 FTP

0 helpful
7 replies

by gcuz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to set up an FTP site for some business clients using IIS 5.0. Here's the problem, I want to use the same site (1 IP address and port) for all clients using 1 main ftp root folder and have all clients drop into seperate sub-folders based uponlog in, and keep clients from being able to back out of the subfolder into the main ftp root folder. Thus all the clients could "see" is content in their respective folders and would not have rights or ability to move out of their folders into another clients folders and documents.

Thanks in advance

7 replies

by robert schommer

Placing the appropriate permissions on each account will facilitate this. You just have to be diligent in setting up your permissions.

Third party FTP server applications can make this easier.

by gcuz

Care to elaborate a bit farther?!?

I know its a permissions issue, however the issue I keep running into, is the ablilty to back out of the sub-folder that each client drops into, to the main Ftp root folder. IIS keeps telling me that I have to give some rights to this folder to every user account that can log into the site. How do I pervent users from accessing this main folder from their respective sub-folders???

Glenn

by taminato

Hi,

Tougher than I originally thought. I tried it and the result is that the users can still traverse up to ftproot but they are denied access to view anything. I did this by adding an explicit denied entry for the c:\inetpub\ftproot folder in the Advance permissions tab to 1. Traverse Folder / Execute File and 2. List Folder / Read Data. Of course, remember to only apply these permissions to 'This folder only' or else the users will be blocked to going into their own directories. I alsohad an Allow entry that grants everyone permission to this folder. This apparently will allow the FTP daemon to traverse into the user specific directory. (From this we know the initial directory traversing after the user logs in is not done with the users account.)

Good luck.

by gcuz

This still allows the user to back out of the sub-folders into the main FTP root folder.

Close thou.

by shmaltz

In addition to add the security settings to the folders. So they can only access their folders. I would also add a web site so they are droped in to their folder.
Using ASP you can set permissions to the ASP page, so that all of them have permissions to read it, but for the default internet accound I would deny permissions. That way they are prompt for a user name and password. Then using ASP I would check what user name they are using. And using that name I would drop them to their folder.

This discussion is closed to new replies.