Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: FTP on IIS |
|---|---|
| Date: | Fri, 18 Jan 2008 14:20:30 -0800 |
IIS 6, which comes with Windows Server 2003, is quite secure out of the box. Most of the evil holes that were present in IIS 5 and earlier have been patched. If you're forced to use IIS 5 or lower, I agree with all the other comments. Use something else. When you select to install IIS, the minimum components needed for static HTML pages are already selected. For FTP, just deselect the web components and install the minimal FTP components. I would suggest using local GUEST accounts for authentication. I would also suggest placing the FTP root on a separate partition with no other files. Do not place the FTP root on the system partition. Do a Google search on "windows ftp security" for articles on setting up Windows 2003 FTP.
-----Original Message----- From: listbounce@securityfocus.com
[mailto:listbounce@securityfocus.com] On Behalf Of
lauren.malhoit@tylertech.com Sent: Friday, January 18, 2008 10:58 AM To: focus-ms@securityfocus.com Subject: FTP on IIS I'm preparing to build a new FTP server using IIS (or an IIS server
using FTP??? I'm not
sure). Anyway, I was wondering if anyone could recommend some good
sources on how to lock
it down. I need to configure it for an FTP site that anyone can get
to and one that is
password protected. Thanks in advance!
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: FTP on IIS, Smith, Ryan |
|---|---|
| Next by Date: | Re: FTP on IIS, pinowudi |
| Previous by Thread: | RE: FTP on IIS, Smith, Ryan |
| Next by Thread: | RE: FTP on IIS, Nick Wells |
| Indexes: | [Date] [Thread] [Top] [All Lists] |