[OT] FTP Setup

Todd,

Just one more quick thought -

OpenSSH is free and secure. Here is a link for the Windows client/server
suite.

http://sshwindows.sourceforge.net/

The real trick will be getting the clients on board. But from your
descripiton, at least the ftp server will located on your hosting company's
network instead of yours.

Charles

----- Original Message -----
From: "Todd Caughey" <caugheyt@...>
To: <vantage@yahoogroups.com>
Sent: Monday, February 21, 2005 1:03 PM
Subject: RE: [Vantage] [OT] FTP Setup


>
> At the moment I am waiting for a response back from our web hosting
service provider. All of our web site and current FTP capability is located
"there" (not sure where "there" really is). I don't have the resources to
set up a dedicated server on-site so have to do everything via the hosting
service (Hostcentric). I have asked them if they can setup one big FTP area
with a common username and password we can give any customer that allowws
one-way uploads but no ability to see file names in there or read the files.
Then we can log in with full privs and download them to CAD PCs here.
>
> Personally I would rather the customer just send the darned files via
email and be done with it but apparently a bunch of the larger ones are used
to transfering files via (there term) "Secure FTP site" which we apparently
do not have but they expect us to. They say "jump" and we say "how high?"
Similar to bar coded custom shipping labels. Given the clear text issue I
have to wonder how secure FTP transfers really are compared to email. If
they really wanted secure they should do PKI.
>
> Thanks Cliff and Charles for the suggestions,
> -Todd C.
>
> -----Original Message-----
> From: Charles Paluska - HPN [mailto:cpaluska@...]
> Sent: Monday, February 21, 2005 11:47 AM
> To: vantage@yahoogroups.com
> Subject: Re: [Vantage] [OT] FTP Setup
>
>
> Just a side note - FTP usernames and passwords are transmitted in Clear
> Text. So it is possible to sniff the packets and grab a valid user
account
> on your server. A write-only account is an extra layer of security, but
it
> maybe too restrictive in actual use. You could setup a SFTP server
> instead, but there's extra hassle because of client support. You could
use
> a webserver with HTTPS for file transfers as an alternative. At a
minimum,
> I would make the FTP box a standalone "server" WITHOUT any common accounts
> with the rest of your infrastructure including using different
administrator
> passwords.
>
> My 0010 bits,
>
> Charles
>
> ----- Original Message -----
> From: "Cliff Drumeller" <cliff@...>
> To: <vantage@yahoogroups.com>
> Sent: Monday, February 21, 2005 11:47 AM
> Subject: RE: [Vantage] [OT] FTP Setup
>
>
> >
> > Todd
> >
> > You set up your FTP site on a windows 2000 or greater box. Setup an
> > Uploads folder with Client sub folders. Set up a local FTP users group
and
> a
> > local user accounts on the box for access. Use NTFS permisions to
control
> > access. Use the FTP group to get them in the front door. Remove the FTP
> user
> > group from the individual client folder and add the user account with
> write.
> > This will limit customer access.
> >
> >
> > Cliff Drumeller
> > IT Manager
> > Mass Precision Sheetmetal
> > 408 954 0200 x 217
> >
> >
> >
> > _____
> >
> > From: Todd Caughey [mailto:caugheyt@...]
> > Sent: Monday, February 21, 2005 7:38 AM
> > To: vantage@yahoogroups.com
> > Subject: [Vantage] [OT] FTP Setup
> >
> >
> > I ahve been asked to setup a space where customers can copy CAD files to
> via
> > FTP. I know next to nothing about FTP. Once upon a time I had our web
> > hosting service setup an FTP upload space for our web site on their
> server.
> > It has two username/password sets - one for us and one for one
particular
> > customer. This customer has access to the FTP folder but nobody else
> > besides us can see it.
> >
> > Now it appears many customers prefer to transfer files to us via FTP
> rather
> > than email. I was wondering how other people handle this - especially
if
> > you have no web server or ftp server of your own but also if you do then
> how
> > was it set up? Does each customer have their own "area" where they can
> > transfer files but other customers can not see them? Is password
> protects?
> > Is it possible (or typical) to have an upload ONLY area where all the
> > customers can write to by nobody can see or read from (a one-way
> transfer)?
> > I'm trying to figure out beforehand what I want to ask our web hosting
> > service to provide.
> >
> > Thanks,
> > Todd Caughey
> > Harvey Vogel Mfg. Co.
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have
> > already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > < http://groups.yahoo.com/group/vantage/files/.>
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > < http://groups.yahoo.com/group/vantage/messages>
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > < http://groups.yahoo.com/group/vantage/links>
> >
> >
> >
> > Yahoo! Groups Sponsor
> >
> >
> <
http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
> >
> oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=0/SIG=12imbk69l/*
http://clk.
> > atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
> >
> <
http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
> >
> oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=1/SIG=12imbk69l/*
http://clk.
> > atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
> >
> >
> > Get unlimited calls to
> >
> > U.S./Canada
> >
> >
> >
> < http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/
<http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=11090003
> &time=11090003
> > 42329827>
> >
> >
> <
http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=
> > :HM/A=2343726/rand=439175708>
> >
> > _____
> >
> > Yahoo! Groups Links
> >
> >
> > * To visit your group on the web, go to:
> > http://groups.yahoo.com/group/vantage/
> > < http://groups.yahoo.com/group/vantage/>
> >
> >
> > * To unsubscribe from this group, send an email to:
> > vantage-unsubscribe@yahoogroups.com
> > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> >
> >
> > * Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> > < http://docs.yahoo.com/info/terms/> .
> >
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
> >
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
>
>
>
> Yahoo! Groups Sponsor
>
<http://us.ard.yahoo.com/SIG=12919vqu2/M=324658.6070095.7083352.3001176/D=gr
oups/S=1705007183:HM/EXP=1109094408/A=2343726/R=0/SIG=12i45du4v/*http://clk.
atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109008008524835>
<http://us.ard.yahoo.com/SIG=12919vqu2/M=324658.6070095.7083352.3001176/D=gr
oups/S=1705007183:HM/EXP=1109094408/A=2343726/R=1/SIG=12i45du4v/*http://clk.
atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109008008524835>
>
>
> Get unlimited calls to
>
> U.S./Canada
>
>
<http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=11090080
08524835>
>
<http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=
:HM/A=2343726/rand=193303076>
>
>
> _____
>
> Yahoo! Groups Links
>
>
> * To visit your group on the web, go to:
> http://groups.yahoo.com/group/vantage/
>
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
I ahve been asked to setup a space where customers can copy CAD files to via FTP. I know next to nothing about FTP. Once upon a time I had our web hosting service setup an FTP upload space for our web site on their server. It has two username/password sets - one for us and one for one particular customer. This customer has access to the FTP folder but nobody else besides us can see it.

Now it appears many customers prefer to transfer files to us via FTP rather than email. I was wondering how other people handle this - especially if you have no web server or ftp server of your own but also if you do then how was it set up? Does each customer have their own "area" where they can transfer files but other customers can not see them? Is password protects? Is it possible (or typical) to have an upload ONLY area where all the customers can write to by nobody can see or read from (a one-way transfer)? I'm trying to figure out beforehand what I want to ask our web hosting service to provide.

Thanks,
Todd Caughey
Harvey Vogel Mfg. Co.


[Non-text portions of this message have been removed]
Todd

You set up your FTP site on a windows 2000 or greater box. Setup an
Uploads folder with Client sub folders. Set up a local FTP users group and a
local user accounts on the box for access. Use NTFS permisions to control
access. Use the FTP group to get them in the front door. Remove the FTP user
group from the individual client folder and add the user account with write.
This will limit customer access.


Cliff Drumeller
IT Manager
Mass Precision Sheetmetal
408 954 0200 x 217



_____

From: Todd Caughey [mailto:caugheyt@...]
Sent: Monday, February 21, 2005 7:38 AM
To: vantage@yahoogroups.com
Subject: [Vantage] [OT] FTP Setup


I ahve been asked to setup a space where customers can copy CAD files to via
FTP. I know next to nothing about FTP. Once upon a time I had our web
hosting service setup an FTP upload space for our web site on their server.
It has two username/password sets - one for us and one for one particular
customer. This customer has access to the FTP folder but nobody else
besides us can see it.

Now it appears many customers prefer to transfer files to us via FTP rather
than email. I was wondering how other people handle this - especially if
you have no web server or ftp server of your own but also if you do then how
was it set up? Does each customer have their own "area" where they can
transfer files but other customers can not see them? Is password protects?
Is it possible (or typical) to have an upload ONLY area where all the
customers can write to by nobody can see or read from (a one-way transfer)?
I'm trying to figure out beforehand what I want to ask our web hosting
service to provide.

Thanks,
Todd Caughey
Harvey Vogel Mfg. Co.


[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>



Yahoo! Groups Sponsor

<http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=0/SIG=12imbk69l/*http://clk.
atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
<http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=1/SIG=12imbk69l/*http://clk.
atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>


Get unlimited calls to

U.S./Canada


<http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=11090003
42329827>

<http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=
:HM/A=2343726/rand=439175708>

_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/
<http://groups.yahoo.com/group/vantage/>


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
Just a side note - FTP usernames and passwords are transmitted in Clear
Text. So it is possible to sniff the packets and grab a valid user account
on your server. A write-only account is an extra layer of security, but it
maybe too restrictive in actual use. You could setup a SFTP server
instead, but there's extra hassle because of client support. You could use
a webserver with HTTPS for file transfers as an alternative. At a minimum,
I would make the FTP box a standalone "server" WITHOUT any common accounts
with the rest of your infrastructure including using different administrator
passwords.

My 0010 bits,

Charles

----- Original Message -----
From: "Cliff Drumeller" <cliff@...>
To: <vantage@yahoogroups.com>
Sent: Monday, February 21, 2005 11:47 AM
Subject: RE: [Vantage] [OT] FTP Setup


>
> Todd
>
> You set up your FTP site on a windows 2000 or greater box. Setup an
> Uploads folder with Client sub folders. Set up a local FTP users group and
a
> local user accounts on the box for access. Use NTFS permisions to control
> access. Use the FTP group to get them in the front door. Remove the FTP
user
> group from the individual client folder and add the user account with
write.
> This will limit customer access.
>
>
> Cliff Drumeller
> IT Manager
> Mass Precision Sheetmetal
> 408 954 0200 x 217
>
>
>
> _____
>
> From: Todd Caughey [mailto:caugheyt@...]
> Sent: Monday, February 21, 2005 7:38 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] [OT] FTP Setup
>
>
> I ahve been asked to setup a space where customers can copy CAD files to
via
> FTP. I know next to nothing about FTP. Once upon a time I had our web
> hosting service setup an FTP upload space for our web site on their
server.
> It has two username/password sets - one for us and one for one particular
> customer. This customer has access to the FTP folder but nobody else
> besides us can see it.
>
> Now it appears many customers prefer to transfer files to us via FTP
rather
> than email. I was wondering how other people handle this - especially if
> you have no web server or ftp server of your own but also if you do then
how
> was it set up? Does each customer have their own "area" where they can
> transfer files but other customers can not see them? Is password
protects?
> Is it possible (or typical) to have an upload ONLY area where all the
> customers can write to by nobody can see or read from (a one-way
transfer)?
> I'm trying to figure out beforehand what I want to ask our web hosting
> service to provide.
>
> Thanks,
> Todd Caughey
> Harvey Vogel Mfg. Co.
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> <http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> <http://groups.yahoo.com/group/vantage/links>
>
>
>
> Yahoo! Groups Sponsor
>
>
<http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
>
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=0/SIG=12imbk69l/*http://clk.
> atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
>
<http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
>
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=1/SIG=12imbk69l/*http://clk.
> atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
>
>
> Get unlimited calls to
>
> U.S./Canada
>
>
>
<http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=11090003
> 42329827>
>
>
<http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=
> :HM/A=2343726/rand=439175708>
>
> _____
>
> Yahoo! Groups Links
>
>
> * To visit your group on the web, go to:
> http://groups.yahoo.com/group/vantage/
> <http://groups.yahoo.com/group/vantage/>
>
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
At the moment I am waiting for a response back from our web hosting service provider. All of our web site and current FTP capability is located "there" (not sure where "there" really is). I don't have the resources to set up a dedicated server on-site so have to do everything via the hosting service (Hostcentric). I have asked them if they can setup one big FTP area with a common username and password we can give any customer that allowws one-way uploads but no ability to see file names in there or read the files. Then we can log in with full privs and download them to CAD PCs here.

Personally I would rather the customer just send the darned files via email and be done with it but apparently a bunch of the larger ones are used to transfering files via (there term) "Secure FTP site" which we apparently do not have but they expect us to. They say "jump" and we say "how high?" Similar to bar coded custom shipping labels. Given the clear text issue I have to wonder how secure FTP transfers really are compared to email. If they really wanted secure they should do PKI.

Thanks Cliff and Charles for the suggestions,
-Todd C.

-----Original Message-----
From: Charles Paluska - HPN [mailto:cpaluska@...]
Sent: Monday, February 21, 2005 11:47 AM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] FTP Setup


Just a side note - FTP usernames and passwords are transmitted in Clear
Text. So it is possible to sniff the packets and grab a valid user account
on your server. A write-only account is an extra layer of security, but it
maybe too restrictive in actual use. You could setup a SFTP server
instead, but there's extra hassle because of client support. You could use
a webserver with HTTPS for file transfers as an alternative. At a minimum,
I would make the FTP box a standalone "server" WITHOUT any common accounts
with the rest of your infrastructure including using different administrator
passwords.

My 0010 bits,

Charles

----- Original Message -----
From: "Cliff Drumeller" <cliff@...>
To: <vantage@yahoogroups.com>
Sent: Monday, February 21, 2005 11:47 AM
Subject: RE: [Vantage] [OT] FTP Setup


>
> Todd
>
> You set up your FTP site on a windows 2000 or greater box. Setup an
> Uploads folder with Client sub folders. Set up a local FTP users group and
a
> local user accounts on the box for access. Use NTFS permisions to control
> access. Use the FTP group to get them in the front door. Remove the FTP
user
> group from the individual client folder and add the user account with
write.
> This will limit customer access.
>
>
> Cliff Drumeller
> IT Manager
> Mass Precision Sheetmetal
> 408 954 0200 x 217
>
>
>
> _____
>
> From: Todd Caughey [mailto:caugheyt@...]
> Sent: Monday, February 21, 2005 7:38 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] [OT] FTP Setup
>
>
> I ahve been asked to setup a space where customers can copy CAD files to
via
> FTP. I know next to nothing about FTP. Once upon a time I had our web
> hosting service setup an FTP upload space for our web site on their
server.
> It has two username/password sets - one for us and one for one particular
> customer. This customer has access to the FTP folder but nobody else
> besides us can see it.
>
> Now it appears many customers prefer to transfer files to us via FTP
rather
> than email. I was wondering how other people handle this - especially if
> you have no web server or ftp server of your own but also if you do then
how
> was it set up? Does each customer have their own "area" where they can
> transfer files but other customers can not see them? Is password
protects?
> Is it possible (or typical) to have an upload ONLY area where all the
> customers can write to by nobody can see or read from (a one-way
transfer)?
> I'm trying to figure out beforehand what I want to ask our web hosting
> service to provide.
>
> Thanks,
> Todd Caughey
> Harvey Vogel Mfg. Co.
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> < http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> < http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> < http://groups.yahoo.com/group/vantage/links>
>
>
>
> Yahoo! Groups Sponsor
>
>
< http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
>
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=0/SIG=12imbk69l/* http://clk.
> atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
>
< http://us.ard.yahoo.com/SIG=129scivd7/M=324658.6070095.7083352.3001176/D=gr
>
oups/S=1705007183:HM/EXP=1109086742/A=2343726/R=1/SIG=12imbk69l/* http://clk.
> atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109000342329827>
>
>
> Get unlimited calls to
>
> U.S./Canada
>
>
>
< http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/ <http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=11090003> &time=11090003
> 42329827>
>
>
< http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=
> :HM/A=2343726/rand=439175708>
>
> _____
>
> Yahoo! Groups Links
>
>
> * To visit your group on the web, go to:
> http://groups.yahoo.com/group/vantage/
> < http://groups.yahoo.com/group/vantage/>
>
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> < http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links



Yahoo! Groups Sponsor
<http://us.ard.yahoo.com/SIG=12919vqu2/M=324658.6070095.7083352.3001176/D=groups/S=1705007183:HM/EXP=1109094408/A=2343726/R=0/SIG=12i45du4v/*http://clk.atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109008008524835> <http://us.ard.yahoo.com/SIG=12919vqu2/M=324658.6070095.7083352.3001176/D=groups/S=1705007183:HM/EXP=1109094408/A=2343726/R=1/SIG=12i45du4v/*http://clk.atdmt.com/VON/go/yhxxxvon01900091von/direct/01/&time=1109008008524835>


Get unlimited calls to

U.S./Canada

<http://view.atdmt.com/VON/view/yhxxxvon01900091von/direct/01/&time=1109008008524835>
<http://us.adserver.yahoo.com/l?M=324658.6070095.7083352.3001176/D=groups/S=:HM/A=2343726/rand=193303076>


_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
If security is a concern...
I went with FreeBSD Unix using the PureFTP server daemon and Samba access shares enabled internally... I also use SCP (Secure Copy) via SSH2. There are numerous WinSCP clients readily available... FTP will eventually be replaced by SCP just as Telnet has been replaced by SSH.

I originally had this config on RedHat Linux but switched to true Unix to minimize the exploitable vulnerabilities of Windows and Linux.
My $.02... "Windows Security" is oxymoronic ;)

-----Original Message-----
From: Charles Paluska - HPN [mailto:cpaluska@...]
Sent: Monday, February 21, 2005 12:47 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] FTP Setup


Just a side note - FTP usernames and passwords are transmitted in Clear
Text. So it is possible to sniff the packets and grab a valid user account
on your server. A write-only account is an extra layer of security, but it
maybe too restrictive in actual use. You could setup a SFTP server
instead, but there's extra hassle because of client support. You could use
a webserver with HTTPS for file transfers as an alternative. At a minimum,
I would make the FTP box a standalone "server" WITHOUT any common accounts
with the rest of your infrastructure including using different administrator
passwords.

My 0010 bits,

Charles

----- Original Message -----
From: "Cliff Drumeller" <cliff@...>
To: <vantage@yahoogroups.com>
Sent: Monday, February 21, 2005 11:47 AM
Subject: RE: [Vantage] [OT] FTP Setup


>
> Todd
>
> You set up your FTP site on a windows 2000 or greater box. Setup an
> Uploads folder with Client sub folders. Set up a local FTP users group and
a
> local user accounts on the box for access. Use NTFS permisions to control
> access. Use the FTP group to get them in the front door. Remove the FTP
user
> group from the individual client folder and add the user account with
write.
> This will limit customer access.
>
>
> Cliff Drumeller
> IT Manager
> Mass Precision Sheetmetal
> 408 954 0200 x 217
>
>
>
> _____
>
> From: Todd Caughey [mailto:caugheyt@...]
> Sent: Monday, February 21, 2005 7:38 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] [OT] FTP Setup
>
>
> I ahve been asked to setup a space where customers can copy CAD files to
via
> FTP. I know next to nothing about FTP. Once upon a time I had our web
> hosting service setup an FTP upload space for our web site on their
server.
> It has two username/password sets - one for us and one for one particular
> customer. This customer has access to the FTP folder but nobody else
> besides us can see it.
>
> Now it appears many customers prefer to transfer files to us via FTP
rather
> than email. I was wondering how other people handle this - especially if
> you have no web server or ftp server of your own but also if you do then
how
> was it set up? Does each customer have their own "area" where they can
> transfer files but other customers can not see them? Is password
protects?
> Is it possible (or typical) to have an upload ONLY area where all the
> customers can write to by nobody can see or read from (a one-way
transfer)?
> I'm trying to figure out beforehand what I want to ask our web hosting
> service to provide.
>
> Thanks,
> Todd Caughey
> Harvey Vogel Mfg. Co.
>
>

[Non-text portions of this message have been removed]