vanblah

I need to set up an FTP gateway. We have a fileserver (2003 Server) with multiple shares defined. I'd like to move the FTP service away from this server to another.

I could set up another 2003 server with IIS and map drives back to the fileserver but is there a better way? I know that there are better FTP server software packages but keep in mind that this should be as simple as possible.

Thanks for any info.

Doug

skaven

I'll give you the benefit of the doubt and assume you've got perfectly good reasons for

1) still using FTP instead of SFTP
2) moving the service to a second box

Given that, you've pretty much got the right idea: build another box, put an OS on it, map the drives from the filer, and run the FTP service on the new system.

Though I must say that using IIS for your FTP needs seems....reckless. IIS isn't known for its security, and if you're moving your FTP service to another box in the name of security, this does not buy you anything. Especially since FTP sends passwords in plaintext (!!!!) and since the box has all your filer's data mapped to it anyway, anybody that pwns the new FTP box has essentially gained access to the filer anyway.

::shrug:: sorry if I'm not a lot of help; I run linux for all my server needs ;-)

mikec

serv-u rocks for FTP administration. easier and more secure than IIS, IMHO.

http://www.rhinosoft.com

__________________
Until the 20th century, reality was everything humans could touch, smell, see, and hear. Since the initial publication of the charted electromagnetic spectrum, humans have learned that what they can touch, smell, see, and hear is less than one millionth of reality

vanblah

We'd (IT) would prefer to use SFTP and not use IIS for anything. However, we have to cater to the powers that be. Our people want to have access to their files but don't want to use an FTP client. They just want to be able to browse (using IE) and get their stuff.

It doesn't matter if we tell them about the security issues ... it doesn't matter if we tell them how sloooooooow FTP runs in a browser. They just want it simple.

The reason I want to move to another box is so that if I have to shut down FTP (for any reason) I'm not interfering with the file services for local users.

I'm still in the research phase.

vanblah

We have finally talked the powers that be into laying down the law on FTP. It will die a quick death this Summer ... I hope.

I've setup GlobalScape's Secure FTP Server. It allows for SFTP connections, authenticates and sets permissions based on NTLM and NTFS and allows for remote machine "virtual connections" defined in the server properties.

What more could you ask for?

Just wanted to let everyone know. In case you were wondering.

skaven

Sounds like a nice setup. I've used GlobalScape's software before. Pretty good stuff.