IIS FTP Server - Traversing:

This is Interesting: Free IT Magazines  
Home > Archive > IIS FTP Server > March 2004 > Traversing:





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Traversing:
Richie

2004-03-18, 9:50 am

Is it possible to setup win2k or 2003 FTP server so that
it does not allow backing out of there home directory?
Example: A user FTPs to my ftp site he is in his assigned
home, but can cd .. out to see other folders he can't read
them but can list them all does anyone know what I should
be doing to avoid this? I setup an FTP site then create
virtuals with user IDs, is this an incorrect way to use
Microsoft FTP? Thank You al for your Time On This.
Paul Lynch

2004-03-18, 9:50 am

On Thu, 18 Mar 2004 06:16:43 -0800, "Richie"
<anonymous@discussions.microsoft.com> wrote:

>Is it possible to setup win2k or 2003 FTP server so that
>it does not allow backing out of there home directory?
>Example: A user FTPs to my ftp site he is in his assigned
>home, but can cd .. out to see other folders he can't read
>them but can list them all does anyone know what I should
>be doing to avoid this? I setup an FTP site then create
>virtuals with user IDs, is this an incorrect way to use
>Microsoft FTP? Thank You al for your Time On This.


Richie,

Yes this can be achieved in both IIS5 and IIS6.

In IIS5 you had to 'tweak' things a little to get it to work, but it
can be done. See this earlier post for an explanation :

http://groups.google.com/groups?hl=...404ax.com#link3

The good news is that this functionality is now built in to IIS6 :

http://www.microsoft.com/resources/...ftp_isolate.asp

URLS may have wrapped.


Regards,

Paul Lynch
MCSE
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com