Re: vsftpd

Allen Kistler a écrit :

What I observe is that authorized X puts something in his ftp space and gives his login to unknown Z who grabs it. It's becomming a temporary xchange facility. I don't care as long as it doesn't restrict my use of the server, what it begins to do.

Warez? You said this was a "family" server. If you've lost control of who has usernames and passwords, that seems to go beyond just family.


It's rather films taken on the net. And yes it has gone beyond the family.


I'd still say use scp for yourself. There's an AlowedUsers directive in the ssh config. Stop and start vsftpd for everyone else using cron. When you stop vsftpd, make sure to kill all the children, too.

And the server will be unaccessible to those who follow the rules !

ssh/scp also has the benefit that your username and password aren't transmitted in the clear across the Internet. Presumably only you can become root. Even better is to disable password authentication in favor of public keys, which stops brute force attacks on your password. Of course, the security of ssh/scp and vsftpd is a whole other topic.

You're right concerning the protection.

I don't want to flush them all only because of a couple of selfish ones.
I'll keep your advice in mind and try to find a setup that will suit the goods and the bads who come on the server.

Thanks
.

Relevant Pages

  • VsFTPd "553: Could not create file" error (once in a while)
    ... Recently I've upgraded a server running vsftpd from 32bit to 64bit wide architecture. ... since this upgrade I get complaints from clients stating that they sometimes can't upload a file. ... While looking at the server log, I get an average of 200 "FAILED UPLOAD" entries a day on a ftp-server with around 28000 "OK UPLOAD" entries. ...
    (Debian-User)
  • sshd tunnel problem
    ... my problem is the ftp behaviour on my server. ... But if a user connects via ssh2 tunnel to my server, ... First I presumed this could be because the vsftpd might be confused ...
    (comp.security.ssh)
  • Re: [opensuse] Script fails for unknown reason
    ... This is part of a script to manage accounts of a vsftpd server ... but in my server there are plenty resources for a stand-alone FTP ... why would I make it difficult with secondary xinetd process? ... is no need to manually restart it when adding/deleting/changing user accounts. ...
    (SuSE)
  • vsftpd , need help with custom ports. FTP FTP where is thy sting?
    ... I have local net at home behind a firewall.+ DSL. ... I desire to set up my server #2 box with vsftpd, ... I suspect It must have its own unique ports. ...
    (comp.os.linux.setup)
  • Fedora Core 5: How do I use tcpd and conrolling access to my server?
    ... I run a Fedora Core 5 server on a cablemodem and often find in my logs, ... that someone is probably trying to hack the server. ... And kill any running vsftpd process: ...
    (comp.os.linux.networking)