File transfers (way off topic)

system · October 20, 2009, 8:49am

+1

It also gives the option to use https and sftp for "slightly" more secure transfers.

Jim M

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of maurojm
Sent: Tuesday, October 20, 2009 7:42 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: File transfers (way off topic)

Dan,

I run a windows 2003 server with Rhinosoft's Serv-U ftp server in a DMZ. The cost of the Serv-U is $50 and it allows you to create individual users/passwords and lock them in to their own directory. You can also create groups for users. It is a very easy interface.

my 2 cents
Jeff

--- In vantage@yahoogroups.com<mailto:vantage%40yahoogroups.com>, "Dan Shallbetter" <dans@...> wrote:
>
> I have users that are bumping up against the Exchange 2003 files size
> limits for both send and receive (25 - 100mg files). I am reluctant to
> remove the limits fearing that user mail boxes will become exceedingly
> large. What is the easiest / safest way to accommodate both internal
> users and also customer request? Would Sharepoint be an option? I have
> been cautioned that setting up a FTP server can put network security at
> risk.
>
>
>
> TIA,
>
>
>
> Dan Shallbetter
>
> States Electric Mfg.
>
>
>
>
>
> [Non-text portions of this message have been removed]
>

[Non-text portions of this message have been removed]

system · October 19, 2009, 3:31pm

I have users that are bumping up against the Exchange 2003 files size
limits for both send and receive (25 - 100mg files). I am reluctant to
remove the limits fearing that user mail boxes will become exceedingly
large. What is the easiest / safest way to accommodate both internal
users and also customer request? Would Sharepoint be an option? I have
been cautioned that setting up a FTP server can put network security at
risk.

TIA,

Dan Shallbetter

States Electric Mfg.

[Non-text portions of this message have been removed]

system · October 19, 2009, 3:34pm

I use FileZilla Server to host an internal FTP site that engineers and customers can use to exchange larger files. It has no relationship to our internal security domain (i.e. Active Directory), and seemed quite secure when I tested it. I'm not sure how FTP all by itself represents a security problem...depends on what you do with it.

-bws

--
Brian W. Spolarich ~ Manager, Information Services ~ Advanced Photonix / Picometrix
Â Â Â Â bspolarich@... ~ 734-864-5618 ~ www.advancedphotonix.com

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of Dan Shallbetter
Sent: Monday, October 19, 2009 3:32 PM
To: vantage@yahoogroups.com
Subject: [Vantage] File transfers (way off topic)

I have users that are bumping up against the Exchange 2003 files size
limits for both send and receive (25 - 100mg files). I am reluctant to
remove the limits fearing that user mail boxes will become exceedingly
large. What is the easiest / safest way to accommodate both internal
users and also customer request? Would Sharepoint be an option? I have
been cautioned that setting up a FTP server can put network security at
risk.

TIA,

Dan Shallbetter

States Electric Mfg.

[Non-text portions of this message have been removed]

------------------------------------

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links

system · October 19, 2009, 3:47pm

FTP is indeed a security risk. Removing limits can cause huge delays! What about a Google Sites or Google Docs?

Joe Luster
Network Administrator
Cold Jet, LLC
455 Wards Corner Road
Loveland, Ohio 45140
USA
+1 513-831-3211 x308 (office)
+1 513-831-1209 (fax)
www.coldjet.com<http://www.coldjet.com>
[cid:image001.jpg@01CA50D3.65EEA2A0]
Setting industry standards in dry ice technology and solutions for over 20 years.

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of Dan Shallbetter
Sent: Monday, October 19, 2009 3:32 PM
To: vantage@yahoogroups.com
Subject: [Vantage] File transfers (way off topic)

I have users that are bumping up against the Exchange 2003 files size
limits for both send and receive (25 - 100mg files). I am reluctant to
remove the limits fearing that user mail boxes will become exceedingly
large. What is the easiest / safest way to accommodate both internal
users and also customer request? Would Sharepoint be an option? I have
been cautioned that setting up a FTP server can put network security at
risk.

TIA,

Dan Shallbetter

States Electric Mfg.

[Non-text portions of this message have been removed]

[Non-text portions of this message have been removed]

system · October 19, 2009, 3:47pm

I set up the FTP server on our website/webhost. No issues with network
security as it is not on our network.

Edward F. Fox, Jr., CPA

Controller

Maxson Automatic Machinery Company

Phone 401-596-0162 a Fax 401-596-1050

www.maxsonautomatic.com

_____

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Dan Shallbetter
Sent: Monday, October 19, 2009 3:32 PM
To: vantage@yahoogroups.com
Subject: [Vantage] File transfers (way off topic)

I have users that are bumping up against the Exchange 2003 files size
limits for both send and receive (25 - 100mg files). I am reluctant to
remove the limits fearing that user mail boxes will become exceedingly
large. What is the easiest / safest way to accommodate both internal
users and also customer request? Would Sharepoint be an option? I have
been cautioned that setting up a FTP server can put network security at
risk.

TIA,

Dan Shallbetter

States Electric Mfg.

[Non-text portions of this message have been removed]

[Non-text portions of this message have been removed]

system · October 19, 2009, 4:32pm

I personally like Filezilla, but vsftpd is pretty decent for a free linux
version since filezilla won't work on non-windows servers.

Shouldn't be any problem with FTP from a security point of view as long as
you take proper precautions up front. This assumes you put it on it's own
machine instead of teaming it up on a server with other purposes. I wouldn't
put it within the network, nor use network permissions either. I would drop
it outside the network in the DMZ and not give it any type of permission
back into the network.

Also, in terms of general FTP permissions and layout, I usually set things
up basically this way with an FTP site.

No Anonymous access allowed, full logging enabled.

3 base folders, something along the lines of Incoming, Outgoing, and
Downloads.

The Downloads folder is strictly read only for customers & employees and
full controll for internal admins, and contains items that anyone can
download at any time with no worries about license, privacy, or privilage.

Then in the Incoming and Outgoing Folders I use for potentially private or
unique files.

I setup the incoming folders as a "blind put", meaning those folders to not
allow a directory listing to anyone outside of the company, then any
customer can just upload to that folder with no worries about them stumbling
onto something someone else uploaded. Everyone drops their files into this
one folder, then whoever the reciving employee is on our end is responsible
for clearing the file out, and putting it where it is supposed to be
internally in our file system.

For the outgoing folders, I set them up with a subfolder with a unique name
that's not just the name of their company, this is where they would have
access for read and directory listing. This way it allows semi-private
access to each individual customer without being concerned with another
customer snooping or seeing what's going on in regards to others.

This type of layout works well with vsftpd as well as filezilla if you want
to keep usernames and passwords the same for everyone, meaing there are only
3 logins a customer login, an employee login, and an admin login.. I kind of
prefer that to having to keep track of individual usernames, passwords and
which company they have access to. I am not sure what impact this would have
on anyone who needs to conform to SOX though.

However, if you want to give each company/username unique folders to have
permission to, then that would work too, it just requires a little more work
on the admin side keeping track of it and keeping it up to date.

Sharepoint is nice, but there is a lot of management more to it and the
speed is a lot slower due to the added HTTP layer instead of just going
strictly with FTP.

On a side note, Filezilla is small, free and doesn't add much overhead when
running on a server, I actually have setup Filezilla client and server on
all my internal servers to allow me the ability to copy files faster when I
need to make large sets of transfers like installation files, service packs,
backups of user files when repairing workstations. I just flip the service
on when I want to use it and make the FTP transfer instead of doing a copy
and paste through windows. Then I turn it off when I am done. With multi
threaded transfers, and the lower network overhead of the FTP protocol, it
makes a world of difference in overall time when large transfers need to be
done, especially if you are utilizing a WAN.

----- Original Message -----
From: "Dan Shallbetter" <dans@...>
To: <vantage@yahoogroups.com>
Sent: Monday, October 19, 2009 3:31 PM
Subject: [Vantage] File transfers (way off topic)

>I have users that are bumping up against the Exchange 2003 files size
> limits for both send and receive (25 - 100mg files). I am reluctant to
> remove the limits fearing that user mail boxes will become exceedingly
> large. What is the easiest / safest way to accommodate both internal
> users and also customer request? Would Sharepoint be an option? I have
> been cautioned that setting up a FTP server can put network security at
> risk.
>
>
>
> TIA,
>
>
>
> Dan Shallbetter
>
> States Electric Mfg.
>
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
>
>

system · October 20, 2009, 8:42am

Dan,

I run a windows 2003 server with Rhinosoft's Serv-U ftp server in a DMZ. The cost of the Serv-U is $50 and it allows you to create individual users/passwords and lock them in to their own directory. You can also create groups for users. It is a very easy interface.

my 2 cents
Jeff

--- In vantage@yahoogroups.com, "Dan Shallbetter" <dans@...> wrote:
>
> I have users that are bumping up against the Exchange 2003 files size
> limits for both send and receive (25 - 100mg files). I am reluctant to
> remove the limits fearing that user mail boxes will become exceedingly
> large. What is the easiest / safest way to accommodate both internal
> users and also customer request? Would Sharepoint be an option? I have
> been cautioned that setting up a FTP server can put network security at
> risk.
>
>
>
> TIA,
>
>
>
> Dan Shallbetter
>
> States Electric Mfg.
>
>
>
>
>
> [Non-text portions of this message have been removed]
>