[ 
https://issues.apache.org/jira/browse/FTPSERVER-428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13143974#comment-13143974
 ] 

Emmanuel Lecharny commented on FTPSERVER-428:
---------------------------------------------

Fine. Be on your own, and please stop bothering those who actually *write* the 
code.

Or try to be smart, and provide patches. We value that, especially when it 
comes to improve the documentation.
                
> Allow positive ACL instead of just blacklists
> ---------------------------------------------
>
>                 Key: FTPSERVER-428
>                 URL: https://issues.apache.org/jira/browse/FTPSERVER-428
>             Project: FtpServer
>          Issue Type: Improvement
>          Components: Server
>    Affects Versions: 1.0.6
>            Reporter: Blaine Simpson
>            Assignee: Niklas Gustavsson
>              Labels: ACL, address, blacklist, security, vulnerability
>
> There are tons of situations where it is desirable to allow only specified 
> source addresses (and ranges) rather than allowing all except for those 
> specified (i.e. blacklisted).  To require administrators to use a black list 
> when the situation really demands a white list is to encourage security 
> lapses.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to