topic Re: ftpd question in Operating System - HP-UX

ftpd question

Luca Rasconi — Wed, 30 Oct 2002 14:49:07 GMT

Hi,
i need to deny remote ftp acces to a particular user.
That is the only opertione that user can do is like this
ftp 127.0.0.1

while
ftp host_name
from remote host must be refused.

Is it possible?

Thank you
Luca

p.s.: An entry in ftpusers deny access also from local host.

Re: ftpd question

Ken Hubnik_2 — Wed, 30 Oct 2002 14:50:05 GMT

You can use the /var/adm/inetd.sec file to specify what ip address can use ftp.
ftp allow xxx.xxx.*

Re: ftpd question

Stefan Farrelly — Wed, 30 Oct 2002 14:56:38 GMT

yes, you can block it with /var/adm/inetd.sec
see man inetd.sec With this you can block a server for an IP or range of IP's (eg. block ftpd for an IP)

Re: ftpd question

Stefan Farrelly — Wed, 30 Oct 2002 14:57:09 GMT

yes, you can block it with /var/adm/inetd.sec
see man inetd.sec With this you can block a service for an IP or range of IP's (eg. block ftpd for an IP)

Re: ftpd question

Luca Rasconi — Wed, 30 Oct 2002 15:01:46 GMT

Sorry, I try to explain better:
there 3 ftp user (they can make only ftp connections), and I need to deny remote access to one only ftp user.
The other can do it.

Bye
Luca

Re: ftpd question

Darrell Allen — Wed, 30 Oct 2002 15:11:58 GMT

Hi,

I think you are going to have to replace ftp with wrapper script that verifies the user is allowed to ftp only to 127.0.0.1.

Move /usr/bin/ftp to another location that is not in your users' search path and replace it with your script.

inetd.sec will not work. It will deny incoming connections only. Further, it is for IP addresses only, not users.

ftpusers will not work since you want this user to be able to ftp to the local host. Also, it's only for incoming connections, not outgoing.

Why do you want the user to be able to ftp to the local host? Seems he could simply use cp.

Darrell

Re: ftpd question

Luca Rasconi — Wed, 30 Oct 2002 15:13:48 GMT

Hi Darrel,
you are right: why it needs this behaviour?
I simply received this strange (for me) request. I asked him the same question you asked me and I'm waiting for his reponse.

Thank you all
Luca