FTP Server

[Marcus W. Brast]

Greetings,

I am running my FTP Server off of Windows 2000 Server. I've gotten the
server pretty locked down.

My question is as it stands now people who access the site need to prepend
their username with my domain name (ie... domain/username). How do I, or
can I, fix this?

Also is it possible under Windows 2000 to set the home directory for users
logging into the FTP site? I'd rather them go directly to their folder than
start in the FTP root and have to navigate to their folder.

Thanks,

Marcus

 

[Kevin D. Quitt]

Check out serv-U ftp server: http://www.cat-soft.com/

 

[Marcus W. Brast]

I had been using that.

It stopped working for me and when I called their tech support they tried to
help some and was then basically told, "Well it works for me. I don't know
what to tell you."

Marcus

 

[Kevin D. Quitt]

I had been using that.

It stopped working for me and when I called their tech support they tried to
help some and was then basically told, "Well it works for me. I don't know
what to tell you."

The tech support people are the people who sell it. Try the mailing list
(e-mail address removed), or writing to the author Rob Beckers <[email protected]>.

 

[George Hester]

You got to be kidding.

 

[George Hester]

To remove the neccessity of prepending a Domain name:

On the Domain controller:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters
DefaultLogonDomain="yourdomainname.com"

Is the reg file watch for wrapping. Ther value is a REG_SZ data type.

Make virtual folders in the FTP site wuth the same name as the user. The physical name of the folders can be anything you want.

 

[Marcus W. Brast]

Thanks for the virtual folder trick, that worked like a charm.

I've tried the reg key on my FTP server and it didn't work. I can't find a
similar path on my Domain Controller (it's SBS 2k3 Standard).

Any suggestions?

Thanks,

Marcus

To remove the neccessity of prepending a Domain name:

On the Domain controller:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Parameters
DefaultLogonDomain="yourdomainname.com"

Is the reg file watch for wrapping. Ther value is a REG_SZ data type.

Make virtual folders in the FTP site wuth the same name as the user. The
physical name of the folders can be anything you want.

 

[Kevin D. Quitt]

You got to be kidding.

About what?

 

[George Hester]

This is for the Windows 2000 FTP Server. It should work in 2003 as well. There is an article on it:

http://support.microsoft.com/default.aspx?scid=kb;en-us;310723

Hmmm maybe not since you have IIS 6. Ask in:

microsoft.public.inetserver.iis.ftp

 

[George Hester]

Serv-U FTP server is a hacker's delight you never noticed that before?

 

[Kevin D. Quitt]

Serv-U FTP server is a hacker's delight you never noticed that before?

It has been used by hackers, but not any of the recent versions. And the executable
itself wasn't hacked, it was just installed by the worm that had already invaded the
system. And the reason they used it is because it's so easy to use and so powerful, while
using very little system resource.

When was the last you looked at it?

 

[George Hester]

The last time it was put on my machine. Maybe 6 mos ago. I did use it once
and liked it. But when it became a hacker's paradise I decided it wasn't
for me.

--
George Hester
_______________________________

 

[Kevin D. Quitt]

The last time it was put on my machine. Maybe 6 mos ago. I did use it once
and liked it. But when it became a hacker's paradise I decided it wasn't
for me.

You keep saying it's a hacker's paradise; it's no such thing. It's harder to hack than
any other ftp server; it's more feature rich and secure than IIS' ftp server by far. Some
hackers install it once they've already broken into your system, but never to break into
your system.

 

[Marcus W. Brast]

My only complaint was the level of tech support.

Love the program, but once it broke, I spoke to their tech support and they
tried to help, then I was told 'It works for me, I don't know what to tell
you."

 

[George Hester]

You seem to be misunderstanding me. I did NOT say it was used to break into
my machine. I said it was a Hacker's paradise. For example. It can be
started as a Service. Now how do I know if I use the thing that the Serv-U
that is on my sysytem came from me or was now put there by a hacker? Sure
sure I can anyilxe this analyze that and analyze have a merry ole time. Or
I can just keep it off my system at all. I'll go with the later.

--
George Hester
_______________________________