[Matthieu]

Local administration and multi-users

This recommendation concerns administrators running Gene6 FTP Server in a multi-users environment.

Though the default installation does not require advanced configuration, letting your ftp server administration accepting local users without authenticating them can become a potential security problem in a Windows multi-users situation.

Unless you have a good reason to allow it, it is advised - once you have initialy setup your server - to modify the Administration configuration to prevent local administration to windows local users.

Here are the 3 steps required to restrict localhost administration access to authenticated administrators :

1- Create a new administrator account (see manual)
2- Uncheck Administration / Properties / Grant all access to localhost (see manual)
3- Edit Local Machine / Properties to enter the login/password of the administrator account.

If you need help about these options please contact us at support@g6ftpserver.com

The installer of the next version will force administrator account creation, until then please apply the solution above.

General note

As a general note, we suggest everyone the reading of "Hardening your FTP Server" how to.

This post contains useful information on how to make your server more secure, how to bind accounts to known ip address, restrict access, common security suggestions and information about options that you may not have tried yet.

How to

Several how-to have been posted on the forum (see How to) to explain you the configuration of some features of the server :

- Storing server settings in a database
- Requesting and using a CA ssl certificate
- Virtual domains setup
- Chinese/Arabic ... chars not shown in filename
- NT authentication, Active directory
- Using UNC path / Network shares / Mapped drives
- PASV, FXP, FTP behind a Linksys router.

If you have an how-to ideas or would like a subject to be developped, feel free to leave a message in the suggestions forum.

Good reading.