Securing ftp to limited users

[Joanne Keegan]

Hi Everyone,

What is the easiest way of limiting the use of ftp to certain users (e.g. root & other designated users)?

With the new version of qvterm being rolled out, users will have the ability to ftp to the system - this is where the concern lies. While we can tighten up permissions, there are some limitations to this in relation to the applications on the server. I don't want to close off the port if I can avoid it.

Any advice will be appreciated - and I do assign points.

Regards,

Jo

[Michael Tully · Accepted solution]

Hi,

The simplest way you can do it is usign the /etc/ftpusers file where you will put the name of the users you want to deny ftp. For Hosts you can use inetd.sec file to allow or deny the access to ftp on your machine.

HTH
-Michael

[S.K. Chan]

You can try this ..

a) Create /etc/ftpusers file
b) Add the login id of the users you wanted to deny the ftp access.
For example:
root
guest
jimbob

[Darrell Allen]

Hi Joanne,

To add to Michael's reply, you can use a combination of ftpusers and inetd.sec to limit access to specific users (ftpusers) from specific addresses (inetd.sec).

Darrell

[Joanne Keegan]

Thanks to those that have replied. The file is actually /etc/dtpd/ftpusers.

I tested it, and it works. Brilliant!!

Thanks,

Jo