RE: Secure Writeable Restricted VSFTP Site

Are you allowing external connections to the ftp ports in your
/etc/hosts.allow file?
 
 

--
Michael St. Laurent
Hartwell Corporation 

-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Gavin Mellors - BCX SS
Sent: Monday, April 18, 2005 1:34 PM
To: [email protected]
Subject: Secure Writeable Restricted VSFTP Site


Hi All
 
I am trying to setup a secure ftp site using RH9.0, vsftpd and xinetd.
I can ftp in locally (local_enable=YES) but I cannot connect to my site from
an external address.
 
The user accounts have been created on the local machine and I can ftp to my
box using both accounts and am able to read,write and delete files. I am
unable to move out of the local_root dir as specified in vsftpd.conf file
and , anonymous and ftp user access is denied. So all seems well locally.?
(I want to give web developer write access to the web site but restrict
access to two specific external IP addresses.
Following contents of my config files.
 
more /etc/xinetd.d/vsftpd
service ftp
{
        disable                 = no
        socket_type        = stream
        wait                    = no
        user                    = root
        server                 = /usr/sbin/vsftpd
        nice                    = 10
        only_from           =  www.xxx.yyy.zzz <http://www.xxx.yyy.zzz> 
        log_on_failure     += USERID
}
 
/etc/vsftpd.conf
ftpd_banner=Welcome to the Blah Ftp Server
anonymous_enable=NO
local_enable=YES
hide_ids=YES
write_enable=YES
local_root=/var/www/                    //I have added my web developer to
the apache group and chown to these files root:apache
pam_service_name=vsftpd             // Aaargh!!! I needed to change it to
this from pam_service_name=ftp ;)
xferlog_enable=YES
# Security
userlist_enable=YES
userlist_deny=NO

Thanks in advance.
Gavin Mellors
 
Kind Regards,
Gavin Mellors
Senior Customer Services Engineer KZN
Support Services
Business Connexion (Pty) Ltd


	  Office:	   +27 (0)39 695 0002	
	  Mobile:	   +27 (0)82 577 8675	
	  Fax:	   +27 (0)39 695 0002	
	  Email:	   [email protected]
<mailto:[email protected]> 	
	  Web Site: 	  www.bcx.co.za <http://www.bcx.co.za/> 	

NOTICES:
1. This message and any attachments are confidential and intended solely for
the addressee. If you have received this message in error, please notify the
sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use,
alteration or dissemination is prohibited.
2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss
whether it be direct, indirect or consequential, arising from information
made available and actions resulting there from.
3. Please note that Business Connexion only binds itself by way of signed
agreements. 'Signed' refers to a hand-written signature, excluding any
signature appended by 'electronic communication' as defined in the
Electronic Communications and Transactions Act, no. 25 of 2002.
4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole,
I. Mophatlane, M.W. Schoeman.
5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07

-- 
Shrike-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/shrike-list