topic Re: ftpaccess file in Operating System - HP-UX

ftpaccess file

DaveJC — Tue, 06 Nov 2007 08:36:26 GMT

Hello,
I would like to move away a blacklist approach for blocking ftp access (involving listing users to be blocked in /etc/ftpd/ftpusers) and use a whitelist involving allowing only a certain list of users to use ftp.

I need to use the /etc/ftpd/ftpaccess file, however I cannot find any detailed documentation on exactly what I need to do (including the man page). Any pointers to appropriate examples would be useful, or a pointer to some useful documentation.

All I want to do is say allow the following users to allow logging in with ftp. At the moment I do not want to put restrictions on IP range etc.

Thanks

Re: ftpaccess file

Steven E. Protter — Tue, 06 Nov 2007 08:51:15 GMT

Shalom,

wu-ftpd is based on the blacklist approach. Thats how its designed.

There may be a workaround.

http://www.landfield.com/wu-ftpd/mail-archive/1998/Mar/0004.html

However you may want to abandon the clear text authentication world of ftpd and use Secure shell, as in SFTP, ported from Open SSH.

With ssh and perhaps tcpwrappers your goal would be very easy to reach.

SEP

Re: ftpaccess file

DaveJC — Wed, 07 Nov 2007 05:56:19 GMT

Thanks for the information, from the link attached I can't see a work around though.

Moving to sftp would be quite a big change, are there any versions of ftp that allow whitelist (or can anyone think of any work arounds foe wu-ftp - other than writing a script to move every user not requiring ftp to ftpusers).

btw I am just interested in blocking on user names not IP address.

Re: ftpaccess file

skt_skt — Sun, 11 Nov 2007 18:48:12 GMT

this is one type of entry i have observed on the ftpaccess file..I have NOT implelemnetd anything myself this way.

upload /home/ftp /pub yes nobody nogroup 0600 dirs