[ 
https://issues.apache.org/jira/browse/FTPSERVER-428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13143836#comment-13143836
 ] 

Niklas Gustavsson commented on FTPSERVER-428:
---------------------------------------------

You might find the people are more willing to help you if you are nice and 
helpful towards them. For example, avoid using degrading words and offer ways 
(patches) to solve your problems rather than expecting someone else to do the 
work for for you.
                
> Allow positive ACL instead of just blacklists
> ---------------------------------------------
>
>                 Key: FTPSERVER-428
>                 URL: https://issues.apache.org/jira/browse/FTPSERVER-428
>             Project: FtpServer
>          Issue Type: Improvement
>          Components: Server
>    Affects Versions: 1.0.6
>            Reporter: Blaine Simpson
>            Assignee: Niklas Gustavsson
>              Labels: ACL, address, blacklist, security, vulnerability
>
> There are tons of situations where it is desirable to allow only specified 
> source addresses (and ranges) rather than allowing all except for those 
> specified (i.e. blacklisted).  To require administrators to use a black list 
> when the situation really demands a white list is to encourage security 
> lapses.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to