topic Re: restrict ftp services in Operating System - HP-UX

restrict ftp services

unixadmin_1 — Tue, 06 Jan 2009 13:32:35 GMT

The FTP service was active on the system. If powerful useraccounts are allowed to log on via FTP, the system resources and information are unnecessarily exposed to unauthorised access, tampering and damage. Passwords transmitted via FTP are sent in clear text, which increases the possibility of these passwords being intercepted and logged by “sniffer” software. The information thus obtained could then be used to gain unauthorised access to the system via other, less restrictive services.

Re: restrict ftp services

Pete Randall — Tue, 06 Jan 2009 13:40:14 GMT

If you have a question(s), would you please ask it (or them)? Re-stating accepted security practices doesn't really seem to accomplish much.

Pete

Re: restrict ftp services

Ganesan R — Tue, 06 Jan 2009 13:44:45 GMT

Hi,

This case you should go far ssh with sftp and chroot configuration.

Re: restrict ftp services

yulianto piyut — Tue, 06 Jan 2009 13:46:20 GMT

to restrcit ftp access, u can use tcpwrapper. just mention the ip address allowed to make ftp to your server in /etc/hosts.allow and /etc/hosts.deny. to secure, disable ftp service in /etc/inetd.conf and ask user to use sftp service.

Re: restrict ftp services

unixadmin_1 — Tue, 06 Jan 2009 14:32:18 GMT

is there any procedure or command for restricting services for unauthorised access to the system...Thank you

Re: restrict ftp services

Johnson Punniyalingam — Tue, 06 Jan 2009 14:41:10 GMT

>>is there any procedure or command for restricting services for unauthorised access to the system...Thank you<<

That's why people now days do not use "ftp' service anymore, Due to securety issues,

All Organisation adviced to use only "sftp" secured sftp service, by disabling the ftp and enabling "sftp" services.

>>restricting services for unauthorised <<

You follow with many ways.

1. Creating "anoynums" ftp access only
2. creating ftp.allow.file and ftp.deny.file
3. blocking the ips by specify the ip address range in the /var/adm/inetd.sec
Example:-
ftp allow 192.168.1.1
ftp deny 192.168.1.2

(Most Recommended Action to avoid ftp and use sftp)

Thanks,
Johnson

Re: restrict ftp services

unixadmin_1 — Thu, 12 Feb 2009 13:04:29 GMT

Thanks