Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

Re: FTP on IIS

Subject: Re: FTP on IIS
Date: Fri, 18 Jan 2008 20:02:35 +0000
Hi Lauren,
not sure if it's possible using IIS but I would say that the best way
to lock down an FTP server might be starting to use a chroot
configuration. On some OS like Freebsd you can even go for a jailed
configuration which is even more strict than a simple plain chroot.
The main goal is, instead of allowing total access to the system,
limit access to a given and fixed part of the file system. That is,
once the user has logged into the system he/her will "see" only
his/her resources and nothing else. For example the command "cd /"
will only take the user to his/her "root" i.e. /home/user.

As I said, I'm not sure that this configuration is possible using IIS
but you may want to use proftpd which supports the chroot
configuration

Cheers,
Andrea.


On 18 Jan 2008 18:57:57 -0000,  <lauren.malhoit@tylertech.com> wrote:
I'm preparing to build a new FTP server using IIS (or an IIS server using 
FTP???  I'm not sure).  Anyway, I was wondering if anyone could recommend 
some good sources on how to lock it down.  I need to configure it for an FTP 
site that anyone can get to and one that is password protected.  Thanks in 
advance!


<Prev in Thread] Current Thread [Next in Thread>