FTP question

[bartjones]

I have recently installed FTP server software on my PC so I can share files with a select group of people, about 20 at this point. I only grant access to a single folder on my PC and access expires for users after 3 days. I am running Zone Alarm and Innoculate It. Should I be concerned about others getting access to other parts of my computer? Is my PC less secure for having done this? Any advice would be appreciated. Thanks in advance.

[cyberskye]

Any time you provide services to folks outside your firewall you are reducing the security of your network. ftp is pretty unsecure anyway. What user does the ftp server run as? You should at the very least create a seperate partition for the shared files and set permissions for ftp so it cannot access the rest of your disks. You might want to consider using a dedicated host if you plan to do much sharing. ZA (and most other firewalls) will police access to your network adapter from the internet -- the connection -- not what is done once access is granted (deleting files, etc). If you are serious about security, you have to assume that a host running a public server has been comprimised.

Have fun,

Skye

[bartjones]

I keep the shared files in a seperate folder. The FTP software purports to allow me to designate that folder as the only one the user has access to and locks them into that directory. I have done that. Am I safe in assuming that this wil prevent users from accessing any other part of my computer? I'm not sure I understand what you mean by "partitioning" the area in which I am granting access. Do you mean partitioning a seperate drive? Thanks.

[shaddaddy]

im curious what ftp program your using.

[bartjones]

Serv-U by Rhinosoft.