access limitation
Michael Schams <[email protected]> Mon, 15 Apr 2002 14:04:59 +0200
| Newsgroups | gmane.linux.suse.proxy-suite |
|---|---|
| Organization | NEUSTA Computersprachen GmbH |
| Message-ID | <[email protected]> |
huhu.
is there a possibility to limit the access for clients to defined hosts/
IPs? some ftp-servers (e.g. "ProFTPD", http://www.proftpd.org) allow
apache-style directives like
<Limit LOGIN>
Order deny,allow
Deny from .evil.net
Allow from all
</Limit>
to deny access from *.evil.net but allow all others.
if using the following topology:
Internet <-------> Firewall with ftp-proxy <-------> ftp-server
(abuse.evil.net) 194.12.34.5 192.168.0.1 192.168.0.2
...the ftp-server "thinks" the client is the ftp-proxy ("192.168.0.1")
and
the access-limitations above don't work (e.g. I'm not able to filter all
connections from the domain "abuse.evil.net").
are there any solutions? I miss something like
DenyConnections *.evil.net, bill-gates.com, 207.46.230.220
AllowConnections *.suse.de
in the "ftp-proxy.conf" file.
--
Michael
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]