Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Mark on May 22, 2003, 02:58:40 AM

Title: If not FTP then what?
Post by: Mark on May 22, 2003, 02:58:40 AM

I have read that having FTP ports open can be a source of trouble. Presently, I have only the http port open to the outside world. I would like to offer a few files for download from the web site and allow authorized users to upload from outside the LAN. Where can I find some useful reading on this subject?

Advice, links and reference to useful sources of information would be most gratefully accepted.

TIA,

 - Mark

Title: Re: If not FTP then what?
Post by: Ron Moxham on May 22, 2003, 07:05:36 AM

Here is a good option.
http://mirror.contribs.org/smeserver/contribs/dmay/mitel/contrib/webshare/

Title: Re: If not FTP then what?
Post by: Michiel on May 22, 2003, 11:43:30 AM

Webshare is indeed a good alternative, but if you really need ftp, make sure you installed ProFTPD Chroot from http://www.pagefault.org/code/e-smith.shtml#proftpd

Regards,
Michiel

Title: Re: If not FTP then what?
Post by: Mark on May 22, 2003, 07:02:52 PM

Thanks, Ron and Michiel, for the links. Both of these packages are interesting. I have two questions:
1. Do you know if these packages are compatible with SME v5.6?
2. The documentation is rather light. Where might I turn for some deeper understanding?

TIA,

 - Mark

Title: Re: If not FTP then what?
Post by: Michiel on May 22, 2003, 10:31:38 PM

Both work just fine on 5.6. The packages are self-explanatory i.e. the web pannels are very simple and straightforward.

Regards, Michiel

Title: Re: If not FTP then what?
Post by: Ruusvuu on May 26, 2003, 01:49:16 AM

Do you need to offer ftp access to users?

I have enabled ftp access to a number of users by chown-ing the ibay to that user.

If this is not a good idea, please let me know!

Title: Re: If not FTP then what?
Post by: Mark on May 28, 2003, 12:44:44 AM

I have three distinct items on my list:

1. Allow casual visitors to download files from the web site.
2. Allow known users to download from secured directories not visible to other users.
3. Allow known users to upload to a specific directory, that is also not visible to other users

A known user may be a client or remote worker, assigned to a particular group.

It seems that the SME user account and ibay combination covers most of the needs on the internal LAN. I am considering the security issues that arise when the server is accessed by remote users out there in the wilderness of the internet.

Title: Re: If not FTP then what?
Post by: Ray Mitchell on July 03, 2003, 02:26:10 PM

If you set up groups correctly you can control your user access to ibays that way.

VPN from external will give those users the same rights they have on the local network.

Ray