OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: FTP on IIS servers
From: Gene R. Gomez (ggomezVERANCE.COM)
Date: Fri Sep 22 2000 - 15:08:02 CDT

Best reason not to have it: You don't need it. Basic security training
says "disable all unused or unneeded services."
Going to the weak link in the chain analogy, the more more links you have,
the better the chance SOMETHING is going to give. Besides, it's pretty much
guaranteed that someone else knows something you don't. You give them less
things to know more than you on, and it makes their job much harder if they
want to make your life difficult.

-Gene

-----Original Message-----
From: John Phillips [mailto:wi_phillyHOTMAIL.COM]
Sent: Thursday, September 21, 2000 6:49 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: FTP on IIS servers

Hello,

I am looking for any reason not to have FTP on an IIS
server other than the lear text. Are there any other
holes created because of FTP being installed? What
about also having FP Extentions?

Thank You in Advance,
John