[thelist] Article: Recovering from Anonymous FTP Abuse

[Scott Schrantz]

> -----Original Message-----
> From: Minh Lee Goon [mailto:v7ac at sdsumus.sdstate.edu]
> Sent: Wednesday, January 30, 2002 1:13 PM
> To: evolt
> Subject: [thelist] Article: Recovering from Anonymous FTP Abuse
>
> I'd like each user to have a unique username and password and home
> directory when they log in to the server. I've tried setting up local
> users on the server but I don't know how to assign them a home
> directory. The FTP service on IIS only allows on directory, which, I
> assume, caters to anonymous logins. Any suggestions on how I
> can get the
> results I need?

Here's what my experience has found (on IIS4):
* For each user, create a Windows NT account with a username and password.
You'll have to pay close attention to security to make sure these accounts
only have access to where they're allowed.
* Disable Anonymous Access for the FTP service.
* Under the ftproot directory, create a directory for each user, with the
folder name the same as the username. This folder will then automatically
become the home directory. To the best of my (limited) knowledge, there is
no way to change it.

Hopefully this will help.