On 5 Mar 00, at 17:55, George M. Attkinson wrote:
> Hi,
>
> I am running an FTP server and I need a hint on how to secure it a little
> better.
>
> I have already disabled anonymous access. So only users with ID can access
> it.
>
> Can I limit which users are allow or not? How?
This depends on the ftpd you're using. If you have a file
/etc/ftpusers you can add the names of users you do *not* wish to
have access to ftp.
You could also make use of tcpwrappers to control what ip
addresses have access to what resources.
> Can I limit where users can go (eg. give them access to their directory
> only? How?
You could change the permissions on /home (or wherever home
directories are) so that they don't have necessary permissions to
see the contents. I think (but to be honest am not sure) you can
have some ftp servers chroot to the users home directory
immediately after logon. This would be a much better way of doing
it.
> Do I need to disable something in CRON and others to disable automatic
> running of some scripts (eg. at ) How?.
I don't know offhand of any cron scripts that would mess around
with your ftp setup. /etc/crontab is a starting point to look at.
> Any other comments and suggestions are also appreciated.
If you ever meet a lesbian with a penis it's really a guy.
--
Alexander Else
Internet Operations Technician
OzEmail / UUNET Asia Pacific Network Services
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
