Hi Hadad,

I cannot see any reason why this would not be possible except...

The proftpd daemon would require root privileges to bind to port 21.
However, this then means that the 'admin' user on the VS could
_possibly_ find a way to alter the proftpd config files such that they
could run the command of their choice as root (not good).

You could use ipchains/iptables to counter balance this and get
proftpd listening on a non-privileged port as a non-privileged user
(using port redirection)

What other program are you planning to use on port 21? (just curious)

HTH

Kind Regards,

-- 
Ben Kennish
[EMAIL PROTECTED]

Friday, July 12, 2002, 8:21:43 PM, you wrote:

> Hello Ben,

> Friday, July 12, 2002, 3:29:50 PM, you wrote:

BK>> Hi Hadad,

BK>> FTP is an "(x)inet"ed process so I can see two main options...

BK>> (1) Remove FTP from (x)inetd (thereby removing from all VSs on the
BK>> host)

BK>> (2) Ensure that no users (inc admin) have the 'ftp' priveledges (see
BK>> 'setrights')

BK>> HTH.

BK>> Kind Regards,


> Well, I need liberate port 21 to other aplication, so, I think that
> none that options could be use it.

> Is possible running Proftp in standalone mode, in each virtual servers
> ?

> thank you.

------------------------- The freeVSD Support List --------------------------
Subscribe:   mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
Unsubscribe: mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
Archives:    http://freevsd.org/support/mail-archives/freevsd-support
-----------------------------------------------------------------------------

Reply via email to