OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Nathan C. O'Brien (NathanREWebCom.Com)
Date: Thu May 17 2001 - 19:33:41 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Well, I may get shot down in flames for this post, but I'll contribute what
    knowledge I have just the same. An old company that I worked for used an
    FTP daemon called WarFTPd. I don't know all the specifics of it, but they
    seemed to have fairly good success with it. Further more, it's completely
    freeware. I also know that it does have support for using the NT user base
    to authenticate users, though to what extent I don't know. I can almost for
    sure promise you that it offers IP restrictions, and about anything else you
    can need. On a very peculiar note, I'll make one more comment on it. Even
    though it's freeware being developed by a very young (I believe under 18)
    programmer, it's been adopted by one of the most secretive groups of
    computer users out there. Linux being the obvious choice for security, the
    software piracy community mandates the use of warftpd on windows machines as
    the only choice when linux is not an option. And being that software
    pirates have a tendency not to pay for anything, and that they still chose
    to use a freeware program, that might be taken as high marks for the
    software. I do know that one of the versions had a major security flaw in
    it, but I'm not familiar enough with it to tell you which one. I'm hoping
    someone on this list with pratical experience with WarFTPd can give you more
    advice.

    I'm not exactly sure where to tell you to find it, either.

    Regards,
    Nathan O'Brien
    Freelance Thinker

    ----- Original Message -----
    > Hello group,
    >
    > I am interested to hear some opinions from people regarding alternatives
    to
    > installing IIS on WIN NT 4 systems requiring occassional FTP access.
    >
    > Basically what I want to enable is the ability to collect some application
    > log files (once a month is enough) from a group of NT machines.
    >
    > At present IIS 4 has been installed on each of these machines, with an FTP
    > root limited to a range of internal (non-routable) IP addresses, no
    > anonymous access and ACL'd to suit.
    >
    > >From a user point of view, all that I need is that when someone tries to
    FTP
    > to the machine, they recieve an FTP login prompt, authenticate with an NT
    > domain userid and password, and are able to go about thier business.
    >
    > What are my options to get an FTP service running, without the overhead of
    > installing and running the entire option pack?
    >
    > Can anyone recommend an alternative or two for me to research, especially
    > freeware / shareware and especially somewhat compact in build?
    >
    > Or am I opening a whole new can of worms security wise by not using IIS. I
    > get the impression that IIS *** properly configured *** offers a
    reasonable
    > level of security under NT (I can hear the groans from here from some
    > quarters!) so perhaps some people have a comment or two on this aspect of
    > the issue.
    >
    > thanks!
    > Adrian Beauchamp
    >