Dotnetpanel Forums

Hello!

 Running DNP 2.5.0 and IIS7 with the new FTP 7.0, Win2008 64Bit. When adding new FTP account and choose a special "home directory" it still makes user navigating higher up the physical or virtual directory tree.

 How do I prevent this "out of the box" in DNP. I have tried to Isolate users in the IIS admin console but then "Home directory" cannot be found etc when user tries to login via FTP.

I just want to be able to add a new FTP account and make the home directiry their "TOP" without the possiblity to navigate higher up in the HostingSpace structure.

Hi there,

Actually you shouldn't modify root FTP site settings manually as DNP provisions it automatically and secures as necessary when you're adding MS FTP 7.0 service provider.

In order to revert these settings to dnp-default ones you should open MS FTP 7.0 provider settings and click "Update" button. Afterwards the root FTP site will be configured by DNP as it should.

Thanks.

Ok, but is standard that every users ftp account within the HostingSpace can navigate higher up in the structure and see other Usernames etc even if it it´s impossible to go into those folders. I find it odd the let them see that kind of information.

I thought that the home directory settings in the ftp account whould force the user to that home directory and not be able to see anything higher up than that.

"Microsoft's FTP has always done this."
Great, thanks, now I can stop looking for a solution within the FTP7.0

Hello,

 IIS' FTP7 does support individual servers (right click the site and click Add FTP Publishing).  DNP does not appear to support it yet - no one answered my post or my support request regarding it .

Thanks
-Noah

IIS7 supports setting the ftp account root folder so that
the user will not be able to access or find information about
other ftp accounts.

One way to do that is set the FTP isolation mode of the ftp site (in IIS Manager):

Under "Isolate Users Restrict users to the following directory"

Select:

"Username directory (disable global virtual directory)"

The problem is that for this to work, DNP should create a virtual directory
with the name "LocalUser" and create all user's virtual folders as a sub folders
to this LocalUser virtual folder.

This is documented in the FTP7 manual in the section that explains the option "Username directory (disable global virtual directory)"

Is it possible to add an option to DNP, to create the virtual ftp folders with
the username name under "LocalUser" virtual directory?