[Xitami] disabling ftp-root

[Rick Headly]

thank you francis,

on a recent recommendation from someone here on the list, i decided to take
a quick look at guild-ftp.  it's a very impressive looking piece of software
indeed, but i eventually decided to abort that idea, due to my lack of
understanding how 'normal' ftp services function.  though i've been using
ftp regularly for the past 10 or 11 years, i've never actually belonged to
an ftp file-share 'group' as such... and just don't get the whole concept of
the 'normal' format.  the virtual directories (pub, guest, upload, etc.)
really confuse me, as i fail to understand their unique purpose from a
user's point if view.  previously, whether i've been hosting or being
hosted, ftp has served strictly as a tool for the manipulation of password
protected web-content.  because i consider my ftp requirements to be
somewhat 'light duty', i decided to scrap the whole guild-ftp idea, and not
try to fix something that wasn't necessarily broken.

if any of you run a 'fully functional' ftp service, or know of any such
public services that i could test-drive (as a user), i would kindly
appreciate an invite :).  i'm sure i could learn a lot from a little
hands-on experience.

thanks!

rick


On 11/26/06, Francis Turner <francis.turner at gmail.com> wrote:
>
> You ought to disable Xitami's FTP completely. Its a pretty unreliable
> implementation. If you replace it with some other ftpd you can then
> make sure that only non-anonymous users have access
>
> On 11/25/06, Rick Headly <rickhead at gmail.com> wrote:
> > hi,
> >
> > i've been using xitami for a few years, to host a number of
> > independently-owned sites and domains for others, in various locations
> > around the globe.  each web-masters on the service, simply supplies
> their
> > user-name/password combo to log directly into their designated
> web-directory
> > (via xitami's ftp) to edit or make changes to their site.  this all
> seems to
> > work very well.
> >
> > my problem, is that some of these web-masters (upon supplying an
> incorrect
> > password) report finding themselves logged into the ftp-root...
> > anonymously... and get confused because they can't find their files.
> >
> > i would like to completely disable anonymous logins (and the ftp root)
> > altogether, as i'm only interested in supplying ftp-service to my
> authorized
> > web-masters... and only if they've supplied a valid user-name and
> password.
> >
> > i simply don't want to be providing bandwidth or resources, or handling
> > ftp-connections for just any tom, dick, or harry-bot, who happens to hit
> me
> > on port-21.  i see it as a security threat.  i would prefer if
> xitami-ftp
> > simply did not respond to anyone without a user-name and password...
> because
> > they aren't supposed to be there to begin with.
> >
> > is it possible to 'disable' the ftp-root in such a manner?
> >
> > if so, i'd really appreciate a few pointers in tweaking up my config.
> >
> > thanks!
> >
> > rick
> >
> > --
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.imatix.org/pipermail/xitami/attachments/20061127/a1809a3f/attachment.html