Share this Page URL

Chapter 15. Internet Information Services > Managing the FTP Server - Pg. 509

Internet Information Services Tab HTTP Headers Server Ex- tensions Setting File Types Settings Value Lets you specify MIME Types for file types not already registered with Windows. 509 Under Performance, you should select the number of distinct pages your site will have, usually "fewer than 100." You can also use this tab to modify the site's email address and mail server information. You can also manage the settings for specific folders listed under the Default Web Site entry, by right-clicking them and choosing Properties. On the Documents tab, you can specify that a given document or folder is to be obtained from a different URL on a different Web server, using a process called redirection . Complex CGI programs called ASP applications are configured here as well. Managing the FTP Server If you have installed the FTP service, open the Internet Information Services management tool as described in the previous section, right-click Default FTP Site, and select Properties. To establish a secure server, make the following settings: · On the FTP Site tab, be sure to check Enable Logging (see the "Log Files" section). · On the Home Directory tab, you can specify the folder in which FTP looks for files. If you want to let users use FTP to post files to the Web site, you can specify the same home folder for FTP as you use for the Web service, usually c:\inetpub\wwwroot. · The FTP Home Directory should be on a hard drive formatted with the NTFS file system, so that Windows can enforce user-level file security. Do not point the FTP service at a drive formatted with FAT. TIP When a user connects to your computer with FTP, if the FTP server finds a folder with the same name as the user's account name under the FTP root folder, it will make this the default folder for the user. This is handy if you want to let several users store files on your FTP server; you can create a subfolder for each one using their account name, and FTP will automatically start them in the private folder. You may want to use NTFS permission settings to make each such folder readable and writeable only by its owner. · On the Directory Security tab, you'll have to decide whether or not to permit access based on user account names and passwords. As I mentioned earlier, FTP sends passwords over the Internet as clear-text without encryption, so, it's best to permit only anonymous access, where passwords are not required, and allow only read-only access to files (you don't want to let people write files to your FTP server without a password). On the other hand, if you must let people post files to your computer with FTP, you must use password control to prevent your computer from being abused by others: · If you will use FTP only to let people pick up files, check Allow Anonymous Connections and check Allow Only Anonymous Connections. Be sure that Write permission is not checked on the Home Directory tab. · If you want to let people send you files with FTP, you should uncheck Allow Anonymous Connections and uncheck Allow Only Anonymous Connections. Select only specific directo- ries to give Write permission. I would recommend adding a new drive or creating a new disk partition with the NTFS file system to contain the FTP root folder and nothing else. · On the Messages tab under Welcome, you can enter a few lines of text that will be presented to the FTP user when they establish a session with your FTP server. For example, you might want to issue a warning like this: