Re: [Proftpd-user] ftpdctl ban user is not permanent

On Wed, Oct 30, 2019 at 1:02 PM David Mathog <[email protected]> wrote:
> On 2019-10-29 14:07, David Mathog wrote:
> > This CentOS 7 system can ban ftp users by name with:
> Also, on a related "ban" point, I would like to ban any site which
> attempts a STOR operation.  Our ftp site is download only yet the
> access.log is full of things like this:
>
> 125.133.165.186 UNKNOWN ftp [30/Oct/2019:14:29:50 +0000] "STOR
> 131/GXHLGSL.txt" 550 -
>
> always followed by 11 more STOR attempts for various paths from the same
> address.  Then the same pattern will occur from some other address.  One
> log message is sufficient to tell me this is going on, it would be nice
> to dispense with the next 11.
>
> Possible?

Not related to your first issue, only the STOR ban issue:
Do you use the 'fail2ban' package in CentOS 7? You can set it up to
monitor the ProFTPD log and put in block via firewalld. I've used it
extensively with SSH with good results.


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html