Re: ftp set up



In response to Vizion <vizion@xxxxxxxxxxxxxxxxxxxx>:

-----Original Message-----
From: Bill Moran [mailto:wmoran@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, March 06, 2007 5:24 AM
To: Vizion
Cc: freebsd-questions@xxxxxxxxxxx
Subject: Re: ftp set up


Please wrap your lines around 72 characters.

In response to Vizion <vizion@xxxxxxxxxxxxxxxxxxxx>:

I wonder if someone could point me to a reliable detailed
resource for
configuring an ftp server on freebsd 6.1 for both incoming
and outgoing
files (including anonymous ftp).

I do not want anonymous uploaders to view existing file names in
ftp/incoming or be able to download from incoming. I want
the server as
secure as is reasonably practicable. The notes in the
freebsd handbook are
not really comprehensive enough for me.

Please don't do this. Please don't even try.

--
Got yr point -- my guess is you did not use a process to shift files out
of the the upload directory as soon as they arrived. That way they can be
monitored and never downloaded.

You're still sending out _very_ long lines.
BTW my standard line length is 80 chars..
I have reduced them for you.
Dont you have a wrap option on your mail reader to set the lines to your desired width????


... and no, I didn't use a process to prevent files from being subsequently
downloaded, it would have defeated the purpose of "file transfer".
Here we differ .. if you did not do that you asked for trouble!!


David

I think it is up to each administrator to solve the problems. If you
happen to have an answer to my original question -- a reliable source of
info about ftp configuration it would be useful. It is a long time since I
ran an ftp server and I am rusty.

Sorry, I don't. I haven't set up an FTP server in a long time. scp has
replaced ftp -- which was my point.

I've done my due-diligence in warning of the dangers ...

Uploading to an ftp server has to be treated as a
process by which the sender offers files to the administrator
who may or may not choose to transfer them to the
download directory.
IF you let an end user determine what may be made available
and subsequently have trouble well do not blame
ftp blame the administrator!!
IMHO To do otherwise is not exercising due diligence!!

On web sites I follow the same principle -- users cannot add links
-- only offer them.. same principle!

david
--
Bill Moran
http://www.potentialtech.com

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: FTP directory security setup.
    ... I had the remote site tried to download a small file that worked. ... regarding the connection reset by peer. ... I need to stop the service not the ftp site, ... i still have hackers trying to login to my ftp server. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Security
    ... Does the user have a problem logging on to the FTP server itself, ... > I have an FTP site on a windows 2000 Pro OS. ... > have the main folder which has 4 Subfolders. ... I get access denied when I attempt to download ...
    (microsoft.public.inetserver.iis.security)
  • RE: SBS 2003 Premium: how to allow FTP .EXE downloads
    ... Disable the problematic client XP firewall, ... click to check the "Hide All Microsoft Services" ... Is the FTP server on SBS? ... Download the file from the following URL: ...
    (microsoft.public.windows.server.sbs)
  • Re: Inability to download with IE6
    ... > could be accessed by the laptop. ... The Status bar shows that there are ftp URLs there. ... Ethereal could be used to help format the traces but even though the ... When I attempted to download, the page came up that says the site ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: FTP downloads to server timeout after 60 seconds
    ... Please download a big file via IE browser from Internet, ... Please make a clean boot on SBS server to make sure the problem is ... Click Services tab and select Hide All Microsoft Services and Disable ... Send the .cab file directly to v-robeli@xxxxxxxxxxxxx with subject: FTP ...
    (microsoft.public.windows.server.sbs)