FTP and aspx

[GSK]

can someone do ftp and download all aspx pages from a web
site.? Is there a way to stop this.?
Thanks

 

[Sherif ElMetainy]

Hello

Yes, and there are ways to stop this:

- Don't install or disable the FTP service on the server
- If you want to use FTP yourself but restirct others:
- use a difficult to crack password for FTP (i.e. long password,
with numbers, special characters, small and capital letters). But be warned
that FTP client sends the password to the server in clear text,. So it can
be sniffed.
- Restrict FTP Access to trusted IP addresses only using IIS or
Firewalls

Best regards,
Sherif

 

[GSK]

Thanks

-----Original Message-----
Hello

Yes, and there are ways to stop this:

- Don't install or disable the FTP service on the server
- If you want to use FTP yourself but restirct others:
- use a difficult to crack password for FTP (i.e. long password,
with numbers, special characters, small and capital letters). But be warned
that FTP client sends the password to the server in clear text,. So it can
be sniffed.
- Restrict FTP Access to trusted IP addresses only using IIS or
Firewalls

Best regards,
Sherif




.