Topic: If not FTP then what?

[Mark]

I have read that having FTP ports open can be a source of trouble. Presently, I have only the http port open to the outside world. I would like to offer a few files for download from the web site and allow authorized users to upload from outside the LAN. Where can I find some useful reading on this subject?

Advice, links and reference to useful sources of information would be most gratefully accepted.

TIA,

 - Mark

[Ron Moxham]

Here is a good option.
http://mirror.contribs.org/smeserver/contribs/dmay/mitel/contrib/webshare/

[Michiel]

Webshare is indeed a good alternative, but if you really need ftp, make sure you installed ProFTPD Chroot from http://www.pagefault.org/code/e-smith.shtml#proftpd

Regards,
Michiel

[Mark]

Thanks, Ron and Michiel, for the links. Both of these packages are interesting. I have two questions:
1. Do you know if these packages are compatible with SME v5.6?
2. The documentation is rather light. Where might I turn for some deeper understanding?

TIA,

 - Mark

[Michiel]

Both work just fine on 5.6. The packages are self-explanatory i.e. the web pannels are very simple and straightforward.

Regards, Michiel

[Ruusvuu]

Do you need to offer ftp access to users?

I have enabled ftp access to a number of users by chown-ing the ibay to that user.

If this is not a good idea, please let me know!

[Mark]

I have three distinct items on my list:

1. Allow casual visitors to download files from the web site.
2. Allow known users to download from secured directories not visible to other users.
3. Allow known users to upload to a specific directory, that is also not visible to other users

A known user may be a client or remote worker, assigned to a particular group.

It seems that the SME user account and ibay combination covers most of the needs on the internal LAN. I am considering the security issues that arise when the server is accessed by remote users out there in the wilderness of the internet.

[Ray Mitchell]

If you set up groups correctly you can control your user access to ibays that way.

VPN from external will give those users the same rights they have on the local network.

Ray