topic FTP Users in Operating System - HP-UX

FTP Users

Christian Briddon_1 — Tue, 09 Jul 2002 06:23:14 GMT

Hi there,

I am wanting to block FTP access to all but a few selected users.

My question is, are there any system users that MUST have ftp access? Such as ftp or tftp. I'd hate to block something important.

thanks in advance,

Christian Briddon

Re: FTP Users

V. V. Ravi Kumar_1 — Tue, 09 Jul 2002 06:52:29 GMT

hi,

put the entries of users (login names) for whom u want to block ftp in /etc/ftpd/ftpusers.

see man page for ftpusers.

an entry in ftpusers will block ftp access for that user. if the file doesn't exist u can create it.

ftp access for ftp or tftp is not required.

regds
ravi

Re: FTP Users

Christian Briddon_1 — Tue, 09 Jul 2002 07:01:19 GMT

Thanks for your reply Ravi.

What I actually need to know is if there are ANY users that absolutly MUST have ftp access. I don't want to block something important.

Cheers,

Christian

Re: FTP Users

sven verhaegen — Tue, 09 Jul 2002 07:09:48 GMT

normally FTP is an ADD-on feature out of the ARPA subset of functions , there are no standard products in hp-ux using FTP to my knowledge , however you could have script or 3rd party software or hop softwares that do need ftp because they rely on data transfer trough the FTP protocol but that is something you should know about as you are aware of the software running on the system , you could just block FTP completely by commenting it inetd.conf or by adding a deny statement for *.*.*.* inetd.sec and the machine shouldn't suffer from this at all , this is a common practice is you are making bastion hosts in a DMZ zone for internet access , the same applias to telnet , rcp etc...

Re: FTP Users

V. V. Ravi Kumar_1 — Tue, 09 Jul 2002 07:14:20 GMT

hi,

i have blocked ftp for all these system users, but i don't have any problem with the ftp.

root, daemon, bin, sys, lp, uucp, adm, nuucp, www

i don't think there is no user who must have ftp access, it is ur wish.

regds
ravi

Re: FTP Users

Simon R Wootton — Tue, 09 Jul 2002 08:08:47 GMT

Good question Christian

Like others have already said, no user actually needs ftp access although I'm sure that user 'srw' would appreciate the ability to ftp ... ;-)