Re: FTP server and security

2000-06-30 Thread Bob Bernstein
On Fri, Jun 30, 2000 at 10:41:58AM -0700, Jay Kelly wrote: > Well thats everybody for your help. I have decided just to run Apache. > Looks like for the discussion that ftp is a bad idea. It's a question of cost/benefit. Ftp can be great on a LAN that's protected. Very handy. It's just that anon

Re: FTP server and security

2000-06-30 Thread Jay Kelly
On Fri, Jun 30, 2000 at 11:23:37AM -0400, Bob Bernstein wrote: > On Thu, Jun 29, 2000 at 12:27:04PM -0700, Jay Kelly wrote: > > > I want to enable anonymous login so I link my web to the ftp server. > > Bad decision imho, but if you must: > > ftp://ftp.iss.net/pub/faq/anonftp > > Seriously cons

Re: FTP server and security

2000-06-30 Thread Marcio Rosa da Silva
On Fri, 30 Jun 2000, Bob Bernstein wrote: > On Thu, Jun 29, 2000 at 12:27:04PM -0700, Jay Kelly wrote: > > > I want to enable anonymous login so I link my web to the ftp server. > > Bad decision imho, but if you must: in mine too. That's the way apache.org was hacked. see: http://pontobr.org/n

Re: FTP server and security

2000-06-30 Thread Bob Bernstein
On Thu, Jun 29, 2000 at 12:27:04PM -0700, Jay Kelly wrote: > I want to enable anonymous login so I link my web to the ftp server. Bad decision imho, but if you must: ftp://ftp.iss.net/pub/faq/anonftp Seriously consider NOT having upload capability, but if you must make uploaded files "invisible

Re: FTP server and security

2000-06-30 Thread Alberto Rodríguez Ortega
I dont wanna create a discution which this, but proftpd is better at security and all that ftpd. I would like (personality) too more than wu-ftpd, anyway that is only my point. 1- Well, using ftpd u need add a entry on /etc/inetd.conf, check if u have already one comented there. 2- proftpd wo

Re: FTP server and security

2000-06-29 Thread Alvin Oga
hi ya jay... to enable anonymous user access to your server... just remove "real" from the list in /etc/ftpaccess ( real users ( people) won't be able to login.. ( and play with the /etc/ftp* files to get what you looking for.. there are owner/group permissions and uid/gid that need to be check

FTP server and security

2000-06-29 Thread Jay Kelly
Hello Group, I want to enable my potato box as a ftp server, I have removed proftpd and installed ftpd. I remember when install debian I said no to start the FTP server. Where do I enable this to start the server at boot time? Also is it true the enabling the ftp server will open up my server for a