Comments on: My network works great from 9 to 5 but after that we have bandwidth issues and space disappears! Help!! http://www.asktheadmin.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html Fri, 03 Feb 2012 06:08:50 +0000 hourly 1 http://wordpress.org/?v=3.3 By: El Di Pablo http://www.asktheadmin.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html/comment-page-1#comment-3745 El Di Pablo Wed, 05 Sep 2007 14:46:00 +0000 http://ata.inspiritnetworks.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html#comment-3745 For FTP I like <a HREF="http://www.bauer-power.net/2007/04/ftp-attack-thwarted-by-awesome-freeware.html" REL="nofollow">FileZilla Server</a> because it lets you host FTP over SSL which gives you a secure FTP connection. Regular FTP sends usernames and passwords in plain text over the wire and can easily be 'sniffed' using tools like Wireshark. It also gives you the option to create separate FTP user accounts that are different from your network accounts, as well as use non-standard usernames instead of defaults like root, admin or administrator. You can also require connection over SSL, and then your FTP server will drop all attempts on ports 20 and 21. For FTP I like FileZilla Server because it lets you host FTP over SSL which gives you a secure FTP connection. Regular FTP sends usernames and passwords in plain text over the wire and can easily be ‘sniffed’ using tools like Wireshark. It also gives you the option to create separate FTP user accounts that are different from your network accounts, as well as use non-standard usernames instead of defaults like root, admin or administrator. You can also require connection over SSL, and then your FTP server will drop all attempts on ports 20 and 21.

]]> By: Big Oliver http://www.asktheadmin.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html/comment-page-1#comment-3744 Big Oliver Wed, 05 Sep 2007 11:05:00 +0000 http://ata.inspiritnetworks.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html#comment-3744 Thank you for the info guys. I thought I was going crazy. and PD those are great suggestions. Set it up like my mail server which we also keep set up like that. keep up the amazing work fellas. I have been reading for a few months now and refresh all day long. Thank you for the info guys. I thought I was going crazy. and PD those are great suggestions. Set it up like my mail server which we also keep set up like that. keep up the amazing work fellas. I have been reading for a few months now and refresh all day long.

]]> By: PD http://www.asktheadmin.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html/comment-page-1#comment-3743 PD Wed, 05 Sep 2007 01:33:00 +0000 http://ata.inspiritnetworks.com/2007/09/my-network-works-great-from-9-to-5-but-after-that-we-have-bandwidth-issues-and-space-disappears-help.html#comment-3743 If you need an externally accessible FTP server, build a simple box that does ONLY FTP and place it outside your firewall. Don't make it part of your internal network, don't log on with any internal accounts, make it completely isolated from your internal network.<br/><br/>That way if it gets hacked nothing critical is lost. You can still use an FTP client to get things to and from the machine easily.<br/><br/>Also, have separate folders for uploads and downloads. Create an upload folder that users can only upload to, no downloads; create a similar download folder. <br/><br/>That way automated systems can't upload to and download from the same folder. That configuration alone will keep most junk off your server. If you need an externally accessible FTP server, build a simple box that does ONLY FTP and place it outside your firewall. Don’t make it part of your internal network, don’t log on with any internal accounts, make it completely isolated from your internal network.

That way if it gets hacked nothing critical is lost. You can still use an FTP client to get things to and from the machine easily.

Also, have separate folders for uploads and downloads. Create an upload folder that users can only upload to, no downloads; create a similar download folder.

That way automated systems can’t upload to and download from the same folder. That configuration alone will keep most junk off your server.

]]>