[Proftpd-user] rstatus response

Michael Green <[email protected]>
Newsgroups gmane.network.proftpd.user
Message-ID <[email protected]>
Hello collective wisdom,

We have here:
* Server version:  1.3.5~rc3-2.1ubuntu2.1
* Client version:  ncftp-3.2.5-7.el7.x86_64

My concern is the response to “rstatus” command from ncftp which shows the name of the server software:

ftp> debug <— Turned on debugging to see what command the client sends.
Debugging on (debug=1).
ftp> rstatus
---> STAT <— STAT is sent
211-Status of ‘ProFTPD’ <— somehow the client knows it is ProFTPD
211-Connected from XXX.XXX.XXX.XX (XXX.XXX.XXX.XX)
211-Logged in as ftp
211-TYPE: ASCII, STRUcture: File, Mode: Stream
211-Total bytes transferred for session: 126
211-No data connection
211 End of status
ftp> stat


I consider this a security risk.

My configuration has these directives among the rest:

#ServerName                     "Debian"
ServerIdent on "--------------------------------------------------------------------------------"

Any idea when exactly the server responds to the client with “ProFTPD” string? Is it immediately in response to STAT or some time earlier in the session?
How to eliminate?

—
Regards,
Michael


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.