Re: [Proftpd-user] rstatus response
Michael Green <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
Thanks, TJ. I understand that without an active ServerName directive, the server code defaults to “ProFTPD”, and that in order to not have the name of the product exposed, ServerName directive has to be used. What you response also made me realize is that the line that contains “ProFTPD” is also hardcoded as well as probably the rest of the response to ‘rstatus’. My concern now is that this whole response is a “giveaway” to a potential intruder because if a string (Status of “ServerName”) with specific structure appears in a particular place in the response to known command, one can deduce the product because only this product prints this in response to STAT. Unless RFC dictates that STAT is responded with this particular verbiage. What do you think? > On Feb 24, 2017, at 2:59 PM, TJ Saunders <[email protected]> wrote: > > > >> My concern is the response to “rstatus” command from ncftp which shows >> the name of the server software: >> >> ftp> debug <— Turned on debugging to see what command the client sends. >> Debugging on (debug=1). >> ftp> rstatus >> ---> STAT <— STAT is sent >> 211-Status of ‘ProFTPD’ <— somehow the client knows it is ProFTPD > >> My configuration has these directives among the rest: >> >> #ServerName "Debian" >> ServerIdent on >> "--------------------------------------------------------------------------------" >> >> Any idea when exactly the server responds to the client with “ProFTPD” >> string? Is it immediately in response to STAT or some time earlier in the >> session? >> How to eliminate? > > Every <VirtualHost> (and the default "server config") has a server name, > which defaults to "ProFTPD". You can change this server name of the > ServerName directive, the one that is commented out in your config. > Thus: > > ServerName Debian > > With that enabled in your config, the STAT response should change to > look like: > > ftp> rstatus > 211-Status of ‘Debian’ > ... > > Hope this helps! > TJ > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot > _______________________________________________ > ProFTPD Users List <[email protected]> > Unsubscribe problems? > http://www.proftpd.org/list-unsub.html ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html