Hi, create a zone with anon ftp service only, follow the man pages for anon ftp and be careful with anonymous write access. Otherwise you will sooner or later have bots from all over the world writing to it. ;-)
Solaris uses wu-ftpd which showed a couple of problems in the past: http://www.kb.cert.org/vuls/bymetric?searchview&query=wu-ftpd&searchorder=4 In /opt/sfw you may find proftpd, but that showed also problems. I personally prefer vsftpd, but your mileage may vary. Cheers, Dirk Am 05/10/2007 10:07 PM, Nicholas Senedzuk schrieb: > I need to set up an anonymous FTP server and make it the most secure that I > can. > I know ftp is not secure and doing anonymous FTP is even more insecure but I have no other options. I have configured TCP Wrappers to only allow ftp access to the system from a selected set of systems only. Can anyone recommend an docs on setting up a secure anonymous ftp server. > > > This message posted from opensolaris.org > _______________________________________________ > security-discuss mailing list > security-discuss at opensolaris.org -- Dr. Wetter IT Consulting http://drwetter.org IT Security + Open Source Key fingerprint = 80A2 742B 8195 969C 5FA6 6584 8B6E 59C1 E41B 9153
