[Xitami] disabling ftp-root

[Francis Turner]

You ought to disable Xitami's FTP completely. Its a pretty unreliable
implementation. If you replace it with some other ftpd you can then
make sure that only non-anonymous users have access

On 11/25/06, Rick Headly <rickhead at gmail.com> wrote:
> hi,
>
> i've been using xitami for a few years, to host a number of
> independently-owned sites and domains for others, in various locations
> around the globe.  each web-masters on the service, simply supplies their
> user-name/password combo to log directly into their designated web-directory
> (via xitami's ftp) to edit or make changes to their site.  this all seems to
> work very well.
>
> my problem, is that some of these web-masters (upon supplying an incorrect
> password) report finding themselves logged into the ftp-root...
> anonymously... and get confused because they can't find their files.
>
> i would like to completely disable anonymous logins (and the ftp root)
> altogether, as i'm only interested in supplying ftp-service to my authorized
> web-masters... and only if they've supplied a valid user-name and password.
>
> i simply don't want to be providing bandwidth or resources, or handling
> ftp-connections for just any tom, dick, or harry-bot, who happens to hit me
> on port-21.  i see it as a security threat.  i would prefer if xitami-ftp
> simply did not respond to anyone without a user-name and password... because
> they aren't supposed to be there to begin with.
>
> is it possible to 'disable' the ftp-root in such a manner?
>
> if so, i'd really appreciate a few pointers in tweaking up my config.
>
> thanks!
>
> rick
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe:
> http://lists.xitami.org/mailman/listinfo/xitami
>
>


-- 
http://www.di2.nu/blog.htm
Faber's Fourth Law:
  Necessity is the mother of strange bedfellows.