FTP Server Options

[MasterRacker]

I'm setting up a Win2003/IIS6 FTP server for outside vendors/etc. to use (first time I've done this). I need to set up individual logins for each user and restrict them to their own upload/download folder. With that in mind, I have a couple of configuration questions.

1. Is it more secure to leave the server off the domain and use local accounts or use AD accounts to control the users?

2. Unless I'm misinterpreting something in what I've read so far, it appears I either need to give each user their own IP address or their own port. Is that true?

(Please, no suggestions of an OS other than Windows.)

_____
Jeff
[small][purple]It's never too early to begin preparing for [/purple]International Talk Like a Pirate Day
"The software I buy sucks, The software I write sucks. It's time to give up and have a beer..." - Me[/small]

 

[cajuntank]

Let me tell you what I've done for this scenario and hope it gives you some direction.

1. Is this going to be a public FTP server for anyone, or just for a few vendors and if so, would they be willing to come in through a VPN to gain access to that FTP box (and have the VPN policy defined to only that box)?

2. If this is going to be a public open server, I would put it on your DMZ, use someone else's FTP server software (there's plenty out there... you still can use Windows as the OS, but MS FTP sucks!!!), and follow the hardening directions for a IIS server on a DMZ (do some google searches with those words, "IIS on DMZ").

This server does not need to be in any form or fasion tied to your internal A.D. network and you also need to follow strong password policies as well.

With other FTP server software you can easily create user accounts and "root" their directory the way you need to so you only would need 1 IP address instead of multiple IP addresses for mutiples FTP sites.

 

[dberg35]

Look at this, I use this program and you are able to creat user accounts and direct them to any folder or drive you want. Plus it is free.

 

[MasterRacker]

I'll start looking at 3rd party FTP servers. Free would be best as I have very limited budget. This server will be public but only open to those for whom we create accounts.

Anyone have a specific product they have experience with and liked?

_____
Jeff
[small][purple]It's never too early to begin preparing for [/purple]International Talk Like a Pirate Day
"The software I buy sucks, The software I write sucks. It's time to give up and have a beer..." - Me[/small]

 

[dberg35]

I thought my link posted before but the program is called FileZilla and it is free.

http://filezilla-project.org/

 

[cajuntank]

I personally use Cerberus and have had no issues.