http___www.itsolutionskb.com_hr_2009_05_install-and-configure-iis-70-ftp-publishing-service-over-ssl__1.xml
1.1 1.2 1.3 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 31.2 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 40.1 41.1 42.1 42.2 43.1 46.1 47.1 48.1 49.1 50.1 51.1 53.1 54.1 55.1 55.2 56.1 59.1 60.1 61.1 61.2 62.1 63.1 64.1 65.1
In this article we will describe how we can install, configure and secure over SSL the new FTP Publishing Service 7.5. The new FTP Publishing Service 7.5 has been rewritten for Windows Server 2008 and lot of new futured and additions included. (Integration with IIS 7, FTP over SSL (from v7.0), Improved Logging, etc..) Prerequisites Internet Information Services 7.0 installed. Windows Server 2008 or Vista. Download FTP Publishing Service 7.5 Create a folder for FTP Publishing Service and allow Full access for Administrators - mkdir “c:\inetpub\ftproot\nowayout.myftp.org” - cacls “c:\inetpub\ftproot\nowayout.myftp.org” /G administrators:F /T /E In case we want to add access to specific backup user we can use the following command” - cacls “c:\inetpub\ftproot\nowayout.myftp.org” /G username:F /T /E Perm can be: R Read W Write C Change (write) F Full control Installation Before installing FTP Publishing Service 7.5 over IIS 7.0 be sure that you uninstall any previous versions of FTP Publishing Service. When the installation program of Microsoft FTP Service for IIS 7.0 begins, click Next Accept the End-User License Agreement and click Next: Select the features you want to be installed and click Next: Click Install to begin the installation Click Finish Creating the Certificate After the installation finishes we open Internet Information Services 7.0 Manager and we select Server Certificates to create a self-signed SSL certificate. Another option is to create a certificate request to process with a 3rd party SSL provider which is recommended for production systems as they are from a trusted root. We click on Create Self-Signed Certificate… We specify a certificate name and we click OK: Creating the FTP Site Right click the Sites node in the tree and click Add FTP Site… On the Add FTP Site wizard add the FTP site name and select the path we created in the prerequisites and click Next: On the next page of the wizard we click the Require SSL option and we choose our SSL Certificate then we click Next: On the next page of the wizard we select Basic for Authentication and on Allow access to we select specified users and we define our backup ftp account with read and write permissions then we click on Finish. In case we want to allow anonymous ftp connections we can select Anonymous authentication and on Permissions we select the Read. Configure the Firewall If we are behind a firewall we should configure the FTP Firewall Support under Internet Information Services Manager and configure our firewall ports to accept passive connections on the ports we specify. In case we want to use dynamic port range under Data Channel Port Range we enter port range “0-0″. Configure the FTP Client (FileZilla in this example) Configure FTP Client to connect to our FTP Site using FTP over explicit TLS/SSL Troubleshooting In case we get “534 Local policy on server does not allow TLS secure connections.” error this is because we need to select an SSL certificate at the Server Level: Comments August 4, 2010 Leave a reply Very helpful.. Thanks! [Reply] Leave a reply I’ve been googling left and right and for some reason I didin’t see your great article all this time. everything you have in this article works as advertised. you are the man. Thanks [Reply] August 6, 2011 Leave a reply Very useful! Thanks very much. [Reply] Leave a reply Hi Glafkos Charalambous , Thanks for posting a very good article about FTP publishing services in windows 2008. Please keep posted like this. Thanks, Ganesan K Techhowknow.com [Reply]
1.1 1.2 1.3 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 31.2 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 40.1 41.1 41.2 42.1 44.1 45.1 46.1 47.1 48.1 49.1 51.1 52.1 52.2 53.1 55.1 56.1 57.1 57.2 58.1 59.1 60.1 61.1 63.1 64.1 65.1
U ovom članku ćemo opisati kako možemo instalirati, konfigurirati i osigurati preko SSL novi FTP Publishing Usluga 7.5. Novi FTP Publishing usluga 7,5 je prepisivati za Windows Server 2008 i puno novih futured i dodataka uključene. (Integracija sa IIS 7, FTP preko SSL (od v7.0), poboljšane sječe, itd..) Preduvjeti za upis Internet Information Services 7,0 instaliran. Windows Server 2008 ili Vista. Preuzmite FTP Publishing 7.5 servis Stvaranje mape za FTP Publishing usluge i omogućiti puni pristup za administratore - mkdir "c: \ inetpub \ ftproot \ nowayout.myftp.org" - cacls "c: \ inetpub \ ftproot \ nowayout.myftp.org" / G administratori: F / T / E U slučaju da želimo dodati pristup posebne backup korisnika možemo koristiti sljedeću naredbu " - cacls "c: \ inetpub \ ftproot \ nowayout.myftp.org" / G korisničko ime: F / T / E Perm može biti: R pročitanim Napisati W Promijeni C (zapisivanja) F Potpuna kontrola Instalacija Prije postavljanja FTP Publishing 7.5 servis preko IIS 7.0 biti sigurni da deinstalirate sve prethodne verzije FTP Publishing Service. Kada instalacijski program sustava Microsoft FTP Službe za IIS 7.0 počinje, kliknite Dalje Prihvatite ugovor za krajnjeg korisnika licence i kliknite na Next: Odaberite mogućnosti koje želite instalirati i kliknite Dalje: Kliknite na Instaliraj za početak instalacije Kliknite na Finish Stvaranje certifikata Nakon što je instalacija završi smo otvorili Internet Information Services 7.0 Manager i smo odabrali Server Certifikati za stvaranje samopotpisane SSL certifikat. Druga mogućnost je stvaranje certifikata zahtjev za postupak s 3rd party SSL usluga koje se preporučuju za proizvodnim sustavima kao što su oni iz pouzdanih korijena. Mi na kliknite Stvori samopotpisane certifikat ... Mi navesti ime certifikata, a mi pritisnite U redu: Izrada FTP mjesta Desnom tipkom miša kliknite Site čvor u stablu i kliknite Dodaj FTP stranice ... Na Dodavanje FTP stranice čarobnjaka dodati FTP ime stranice i odaberite put smo stvorili u preduvjeta, a zatim kliknite Dalje: Na sljedećoj stranici čarobnjaka kliknite mi je potreban SSL opciju i biramo našu SSL certifikat onda kliknite Dalje: Na sljedećoj stranici čarobnjaka smo odabrali Basic for Authentication i omogućite pristup smo odabrali određene korisnike i definiramo naš backup FTP račun čitati i pisati dozvole onda kliknite na Finish. U slučaju da želimo omogućiti anonimni FTP veze možemo odaberite Anonimni provjeru autentičnosti i Permissions smo odabrali za čitanje. Konfiguracija vatrozida Ako smo iza vatrozida treba podesiti FTP Support Firewall pod Internet Information Services Manager i konfiguriranje vatrozida naše luke prihvatiti pasivne veze o lukama smo odredili. U slučaju da želimo koristiti dinamički raspon port pod podatkovni kanal raspon portova ulazimo port raspon "0-0". Konfiguracija FTP FileZilla klijent (u ovom primjeru) Konfiguracija FTP klijent za spajanje na naš FTP stranice pomoću FTP preko SSL / TLS eksplicitne Rješavanje problema U slučaju da smo dobili "534 lokalne politike na poslužitelju ne dopušta TLS sigurne veze." Pogrešku to je zato što nam je potrebno za odabir SSL certifikat na razini poslužitelja: Komentari 4. kolovoz 2010Dopust odgovor Vrlo korisno .. Hvala! [ Odgovor ] 1. travanj, 2011Dopust odgovor Sam googling lijevo i desno i iz nekog razloga sam didin't vidjeli veliki članak cijelo vrijeme. sve imate u ovom članku kao radovi reklamirao. ti si čovjek. Hvala [ Odgovor ] 6. kolovoz 2011Dopust odgovor Vrlo korisno! Hvala vrlo velik dio. [ Odgovor ] 19. kolovoz 2011Dopust odgovor Hi Glafkos Charalambous, Hvala za postavljanje jako dobar članak o FTP izdavačke usluge u sustavu Windows 2008. Imajte objavili ovako. Hvala, Ganesan K Techhowknow.com [ Odgovor ] 12. ožujak 2012Dopust odgovor Vrlo korisno, 534 spomenuto je sve razlike. [ Odgovor ]