IIS Setup FTP server graphics and text _ftp server

In the enterprise, for some large file sharing, usually using FTP this form to complete, and because FTP can eliminate the differences between operating systems, for different operating systems to share the role of the file is particularly prominent.

How the FTP server Works

The FTP protocol works in two ways: Port and PASV, and Chinese meaning is active and passive. where the port (active) way of the connection process is: the client to the server's FTP port (default is 21) Send the connection request, the server accepts the connection, establishes a command link. When the data is needed, the server sends a connection request from Port 20 to the client's free port, creating a data link to transmit the data. The PASV (passive) way of the connection process is that the client sends a connection request to the server's FTP port (the default is 21), the server accepts the connection, and establishes a command link. When data is needed, the client sends a connection request to the server's free port, creating a data link to transmit the data.

The FTP server can log in two ways, one for anonymous logons, and one for login with an authorized account and password. Among them, the general anonymous login can only download FTP server files, and the transmission speed is relatively slow, of course, this needs to be set on the FTP server, for such users, FTP needs to be limited, not open too much authority, in terms of bandwidth can also do some small. and need to authorize the account and password login, he needs the administrator to tell the user account and password, the administrator of these account settings, such as they can access to what resources, download and upload speed, and so on, the same administrator needs to limit such accounts, and as far as possible to the right to reduce, if not very necessary, Be sure not to give the account administrator permissions.

Ii. using Windows Component IIS to component FTP server

When setting up an FTP Web site, there are no other special requirements for a service that is only a shared file, which can be done through the IIS components of the Windows xp/2000/2003 operating system. Here's a brief description:

1. IIS installation, you can follow the "start"--> "Settings"--> "Control Panel"--> "Add/Remove Programs", open the Add/Remove Programs dialog box, select the Add/Remove Windows components appears in the following figure

Figure 1

2. Check Internet Information Services (IIS) For more information, as shown in Figure 2

Figure 2

3. After selecting the file Transfer Protocol (FTP) server item in Figure 2, click OK, and then follow the wizard to the installation complete.
4. Open the Start--> program--> Administrative Tools--> Internet Information Services to open the IIS console. As shown in Figure 3

Figure 3

5. Click Default FTP Site, select Properties in the right-click shortcut menu, and open the Default FTP Site Properties dialog box, as shown in Figure 4

Figure 4

6. On the FTP Site tab, you need to modify the description for an easily identifiable identity, such as AH Jiu's FTP station, where the IP address is modified to an IP address of the current host (in the case of a host with multiple IP addresses). If this repair is changed to private address "192.168.112.128", "TCP port" is the default FTP port "21". As shown in Figure 5

Figure 5

7. Select "Allow anonymous Connections" in "Security account", and if authentication is required for the client to log on, the server's Windows user can be selected by browse. As shown in Figure 6, Figure 7

Figure 6

Figure 7

8. Add landing welcome and exit information for the FTP server on the Messages tab, as shown in Figure 8

Figure 8

9. In the Home Directory tab, select the Home directory where the FTP server provides services. Here you can select directory on this computer, browse to select it, or choose a shared location on another computer, which is the home directory of the FTP server providing services on other hosts, in the form of "\\{server }\{share name} "," read "," write "," Log Access "in the FTP site directory, configure the FTP site permissions, where, for security reasons, we consider assigning" read "to anonymous anonymous users without assigning" write "as shown in Figure 9

Figure 9

10. Assign access control rights to the FTP server on the Directory Security tab to grant access to a subset of IP users or deny access from certain IP users. Note When authorized access is selected, the IP address in the following table will be rejected, such as "Access Denied", and the IP address user in the following table will be authorized. As shown in Figure 10

Figure 10

11. At this point, the FTP server was erected successfully.

Third, test the FTP server

1. Open the "Start"--> "-->" attachment--> "command Prompt" and enter "FTP 192.168.112.128" at the cursor, as shown in Figure 11

Figure 11

2. Enter the anonymous account anonymous, the password for your own e-mail address, as shown in Figure 12

Figure 12

3. The FTP server can be operated by the FTP command, as shown in Figure 13

Figure 13

4. Through IE to verify or obtain the FTP service, in IE's address bar input "ftp://192.168.112.128/" as shown in Figure 14

Figure 15

5. In addition, it can be accessed through some FTP client software, such as FLASHFTP, CuteFTP and so on.

Four, virtual directory and the configuration of multiple sites

1. In the FTP configuration process, we often need to a host to provide multiple FTP sites for FTP sharing, at this time to establish a multi-site form to complete, completed by the form of a new site, according to the New Site Wizard step-by-Step completion. As shown in Figure 16

Figure 16

2. At this time, can be set up by a different IP address on the host, or through the same IP address, different port number to identify. As shown in Figure 17, we use port 2121来 to build a second FTP site.

Figure 17

3. In the FTP configuration process, we often need to multiple different paths of the directory for FTP sharing, this can be done through the virtual directory, such as Figure 16, the new virtual directory. Complete by creating a new Virtual Directory wizard. Virtual directories are in the home directory through a folder linked to other directories, in the home directory does not actually exist in the folder, the content in other directories actually exist. As shown in Figure 18, figure 19

Figure 18

Figure 19

4. At this point, note the need to provide the FTP site service in the home directory that f:\ 01 Virtual directory to create a folder named virtual directory, or virtual directories can not provide FTP sharing services. As shown in Figure 20

Figure 20

Figure 21

Five, IIS construction FTP Server Security Discussion

For FTP servers built through IIS, whether anonymous or through authorized accounts and passwords to access the FTP server, because the FTP service account and password authentication method in the form of plaintext transmission in the network, Any host can intercept the FTP server login account and password as long as the packet interception software is used. So its security needs to be enhanced by other means.

Vi. Summary

For building an FTP server through IIS, you need to be aware of the format of its hard disk , such as the disk in NTFS format, the directory you want to share or the FTP client's account to have access to this folder, and in the FAT32 format, this is the way to build it. For the security of its FTP server's account, it is also necessary to enhance security verification through SSL encryption to prevent the account from being intercepted by others.