disabling get for FTP user (chrooted)

[nanoux]

Enquiry: How we can restrict a ftpguest user from downloading/getting the files in a chrooted ftp envoirnment.

[Aji Thomas]

Hi,

Add the user within /etc/ftpd/ftpusers file, which determines the users who are allowed to log in to the FTP server.

AJi

[Torsten.]

IMHO if you don't want a user can download files from ftp, don't "show" him the files (per user rights) or don't let him log on.

[nanoux]

HI all, thanks all for your feedbacks.

However ,we have a chrooted FTP,vendor as user to allow within & mounted directories to be able to list & PUT files & but sould not get any.

I have solved this by using no-retrieve keywork added as part of ftpaccess config.
which seems to work as is marking files as
unretrievable.

I cant find any threads close to this problem as I skim thru ITRC,
which is to disable the GET (WU-FTP internal cmd),apart from file permission controls which were under play

[Jeeshan]

check in /etc/ftpd/ftpaccess file

here you can specify the chroot users to restrict using commands.

If you post your user and ftpaccess file, i can show you how to do that.

[nanoux]

/etc/ftpd/ftpaccess=>

compress yes all
tar yes all

log commands real
log transfers anonymous,real inbound,outbound

shutdown /etc/shutmsg

email user@hostname
guestgroup ftpgroup

chmod {no} guest,class=ftpgroup
delete {no} guest,class=ftpgroup

USER: ftpguest

[Jeeshan]

create rules like this in ftpaccess file

guestgroup ftpguest
delete no ftpguest