Re: secure ftpd upload for specific file restricted by type?

2005-06-30 Thread Damien Miller
Daniel Ouellet wrote: The goal: Only allow PDF upload to that directory with the ftp client and also no possibility to rename the files to .php for example. ... Allow, delete, replace, upload of *.pdf ONLY via ftpd for the reason above? First, ftpd isn't responsible for sftp - you are

secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Daniel Ouellet
Hi all, I am trying to solve a problem I have to improve security and I am hoping someone will have a good idea or point me to docs that may suggest a good way to achieve this. The setup: The various servers are only accessible from three specific location and all is done via ssh only. Any

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Roy Morris
Daniel Ouellet wrote: Hi all, I am trying to solve a problem I have to improve security and I am hoping someone will have a good idea or point me to docs that may suggest a good way to achieve this. The setup: The various servers are only accessible from three specific location and all is

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Jonathan Franks
On Jun 29, 2005, at 2:31 PM, Daniel Ouellet wrote: Hi all, I am trying to solve a problem I have to improve security and I am hoping someone will have a good idea or point me to docs that may suggest a good way to achieve this. The setup: The various servers are only accessible from three

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Daniel Ouellet
Roy Morris wrote: why not have a cron job that looks in a directory, and runs file(1) against it. parse the output and see if it's 'really' a pdf or not? .. if yes - move it otherwise rm the junk. Or I could be nuts once again :) I really wanted to avoid cronjob if possible. Yes it would

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Daniel Ouellet
Jonathan Franks wrote: You probably already tried this but what about having them use something like Filezilla? it supports ftps (ssh) transfers and it's a breeze to use. I didn't try it, no. I am a firm believer to use what comes with the default install. The ftp with the

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Rogier Krieger
On 6/29/05, Daniel Ouellet [EMAIL PROTECTED] wrote: Jonathan Franks wrote: [...] what about having them use something like Filezilla? I didn't try it, no. If I read Jonathan's post correctly, he mentioned FileZilla as a client-side tool. It's a way of allowing you to use the regular ftpd

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread T. Wojdała
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rogier Krieger Sent: Wednesday, June 29, 2005 10:11 PM To: OpenBSD-misc list Cc: Daniel Ouellet Subject: Re: secure ftpd upload for specific file restricted by type? On 6/29/05, Daniel Ouellet

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread T. Wojdała
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Ouellet Sent: Wednesday, June 29, 2005 9:34 PM To: Roy Morris Cc: misc@openbsd.org Subject: Re: secure ftpd upload for specific file restricted by type? Roy Morris wrote: why not have

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Daniel Ouellet
T. Wojda3a wrote: Perhaps you might also be interested in winscp application. http://winscp.net/eng/index.php (you've stated in the goal description that you would like to use ftp client + you want no login account, nevertheless I hope you'll find the information potentially useful)