Restricted FTP in linux 7.2

[shajith_1]

Dear All

Can any body send me the configuration of restricted FTP on Linux .

Thanking You

Shajith.T

[Alexander Chuzhoy]

what do you want to restrict?
Trying to guess:
if you want to restrict the IP addresses from which the connection is allowed:
edit the confiuration file of your ftp server-it suppose to be under /etc/xinetd.d
add a line :
only_from = x.x.x.x
where x.x.x.x is the address/subnet from where the connection can be established.

or
no_access = x.x.x.x
where x.x.x.x is the address/subnet from where the connection can not be established...
Best regards

[SHAJITH_2]

I wanted to Restrict people to access other than his home directory.

[aparna challagulla]

Hi Shajith,

You can restrict a user to a directory by using ftpaccess and chroot.
Pl go thro the manpages for details

HTH
aparna

[Jerome Henry]

Which server do you use ? Wu-ftpd ? Proftpd ?

J

[SAravanan_7]

we are using wu-ftp

[frans tigelaar]

Hi,

You can do a lot of things but say you want to use guest accounts in a chroot. You can do this:

Assume that: $1 = user, $2 = pass, and ftpdir = /var/ftp/users

I'll skip the part of making the jail.

******************************************

useradd -d /var/ftp/users/./users/$1 -m -c "FTP guest user" -g ftp-u -s /dev/null -p $2 $1
chattr -i /ftp/users/etc/passwd
tail -1 /etc/passwd >> /ftp/users/etc/passwd
chattr +i /ftp/users/etc/passwd
echo "upload /var/ftp/users/users /$1 no" >> /etc/ftpaccess
rm -f /var/ftp/users/users/$1/.*
cp /ftp/etc/welcome.msg /ftp/users/users/$1/.message
mkdir /ftp/users/users/$1/incoming
mkdir /ftp/users/users/$1/outgoing
chmod 700 /ftp/users/users/$1/*
chmod 444 /ftp/users/users/$1/.message
chown -R $1:ftp-u /ftp/users/users/$1
chown ftp:ftp-u /ftp/users/users/$1/.message

[Martin P.J. Zinser]

Are these "regular" users with a shell account, or ftp only users?

[frans tigelaar]

These are ftp-accounts only. I gave them a /dev/null as shell. When you build a jail don't forget to make a null device in the jail e.g. /ftp/users/dev/null