FTP Users

[Christian Briddon_1]

Hi there,

I am wanting to block FTP access to all but a few selected users.

My question is, are there any system users that MUST have ftp access? Such as ftp or tftp. I'd hate to block something important.

thanks in advance,

Christian Briddon

[V. V. Ravi Kumar_1]

hi,

put the entries of users (login names) for whom u want to block ftp in /etc/ftpd/ftpusers.

see man page for ftpusers.

an entry in ftpusers will block ftp access for that user. if the file doesn't exist u can create it.

ftp access for ftp or tftp is not required.

regds
ravi

[Christian Briddon_1]

Thanks for your reply Ravi.

What I actually need to know is if there are ANY users that absolutly MUST have ftp access. I don't want to block something important.

Cheers,

Christian

[sven verhaegen · Accepted solution]

normally FTP is an ADD-on feature out of the ARPA subset of functions , there are no standard products in hp-ux using FTP to my knowledge , however you could have script or 3rd party software or hop softwares that do need ftp because they rely on data transfer trough the FTP protocol but that is something you should know about as you are aware of the software running on the system , you could just block FTP completely by commenting it inetd.conf or by adding a deny statement for *.*.*.* inetd.sec and the machine shouldn't suffer from this at all , this is a common practice is you are making bastion hosts in a DMZ zone for internet access , the same applias to telnet , rcp etc...

[V. V. Ravi Kumar_1]

hi,

i have blocked ftp for all these system users, but i don't have any problem with the ftp.

root, daemon, bin, sys, lp, uucp, adm, nuucp, www

i don't think there is no user who must have ftp access, it is ur wish.

regds
ravi

[Simon R Wootton]

Good question Christian

Like others have already said, no user actually needs ftp access although I'm sure that user 'srw' would appreciate the ability to ftp ... ;-)