topic Re: about wu-ftp server in Operating System - Linux

about wu-ftp server

leyearn — Wed, 11 Aug 2004 21:23:29 GMT

now my ftp Server is wu-ftp
but root can't ftp it
why?
in /etc/ftpaccess file

there are several entries:
deny-uid %-99 %65534-
deny-gid %-99 %65534-
allow-uid ftp
allow-gid ftp
what's the meaning of these entries

thanks in advance!

Re: about wu-ftp server

Stuart Browne — Wed, 11 Aug 2004 21:31:57 GMT

deny any UID or GID below 100, and above 65534, unless they have the speicific UID or GID 'ftp'.

i.e. deny root FTP access.

Allowing FTP root access is a good security hole which can be easily abused, especially on a public network.

Re: about wu-ftp server

Steven E. Protter — Thu, 12 Aug 2004 00:40:51 GMT

There is a reason Linux ships with root access blocked.

It is the kids that try thosands of ftp root logins with common passwords hoping they can guess your password.

Once they get your root password they own your system. They can send spam, they can wipe it out, they can do anything.

ftp is inherently unsafe because its authentication goes across public networks in clear text.

That means if you enable root ftp and use it across the public Internet, anyone can get your root password. I've had the same thing happen with telnet which has the same authentication problem.

So, designate a user id don't give it root priviledge and use it as roots slave to do all of your ftp work.

SEP