Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Today, our company is using an FTP Server to transfer files to clients, vendors and more.

Now, we want something more secure.

Needs

  • Uploading with FTP (Windows Explorer, no own program), Browser (IE 7 / 8) or similar
  • Download with any suitable browser (IE 7 - 9, FF 3 - 4, ...)
  • Download with encryptet connection (SSL, ...)
  • automatic deletion of old files (for example with a token which is only 2 days valid)
  • no directory listing for other files, ...
  • not too expensive ;-)

Thank you very much

share|improve this question
    
After some looking around, I don't think Windows Explorer supports SFTP/FTPS. That's your first problem ;) –  Znarkus Jul 12 '11 at 10:06
    
Are you looking for a web app where your clients can log in and access their files? –  Znarkus Jul 12 '11 at 10:07
    
Yes, that's my big problem :) I think, the best would be a web app where co-workers can upload the file and get a https-link which they can send to clients. And they should configure a period of time in which the file is valid to download. A bit like Rapidshare ;-) –  Ueli Jul 12 '11 at 10:28
    
(the web app should have a LDAP Auth or similar) –  Ueli Jul 12 '11 at 10:30

4 Answers 4

I would suggest something like the University of Delaware's Drop Box.

https://turin.nss.udel.edu/wiki/dropbox/doku.php

share|improve this answer
    
Not useful since it doesn't appear you can download the source and host it yourself... –  womble Aug 27 '11 at 5:40
    
Yes, you can, it's been open sourced. –  Tatas Aug 28 '11 at 6:25
    
A link to said source would be useful, then. –  womble Aug 28 '11 at 6:53
    
It's called Google. Use it. turin.nss.udel.edu/wiki/dropbox/doku.php –  Tatas Sep 7 '11 at 19:06

We send files to clients using Basecamp—a web-based project collaboration tool. For $49/mo, you get 35 projects and 15GB of storage. We chose this solution because we needed to track milestones and actions in addition to being able to share files with clients.

While this is a very different approach from hosting your own ftp server, which is what we did previously, we have found this to be a cost-effective and client-friendly solution. Clients receive an email with instructions for logging into the Basecamp project that we've invited them to, and then they can download files at will.

Disclaimer: I am not an employee of, or compensated, by 37signals—the creator of Basecamp.

share|improve this answer
    
Our company has about 2000 user and like to have all sensitive data on our own storage, so Basecamp is not a good soloution for us, thanks anyway! –  Ueli Jul 12 '11 at 13:32
    
@Xarem: I'd recommend adding this information to your original question as an additional requirement. –  Matthew Rankin Jul 12 '11 at 15:27

You might take a look at OpenVPN ALS (http://sourceforge.net/projects/openvpn-als/). The technology has been gobbled up by Barracuda Networks who now offer it both as a software package and appliance.

share|improve this answer
    
Thank you. Sadly, that would be too much for sharing files. It should be easy for the end-user to download files, he shouldn't have to logg in install browser-addons (like juniper, ...) just for downloading a file :) –  Ueli Jul 12 '11 at 13:03
    
Actually, if you take a closer look, no add-ons are needed! The Java-based VPN portion is actually more "hype" that practically in most cases anyway. –  user48838 Jul 12 '11 at 17:46

IIS 7.5 (Server 2008) supports an FTPS server; however, IE and FF don't without plugins, you'd have to get client software.

I think you're on the right track ... upload with FTP, and make available via HTTPS for download, that way browser and plugins don't affect the client end.

You could use the directory listing option in IIS but that's ugly and wouldn't meet your selective enumeration needs. What about something like one of these?

share|improve this answer
    
Hi- thank you for your answer. with the IIS, i sadly can't get an "unique download link" and an expire date or something like this and the most of this scripts don't have ldap auth - and because it's in the DMZ, the script has to be good and secure. –  Ueli Jul 12 '11 at 12:04
    
Yeah, I didn't think I'd be much help. You've got some steep requirements that are a good bit beyond what I'm used to dealing with ^_^; You could run something separate for the file scavenging ... serverfault.com/questions/66698/… covers that. –  Daniel Ball Jul 12 '11 at 12:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.