[nonspam] Re: [Xitami] disabling ftp-root

[Johannes Prost]

Rick,

I am using FileZilla server and client and it is pretty straight forward. I am not an ftp guru 
either, but it works pretty well. The nice thing which I like with file zilla server, you can set 
the IP's you want to connect to the server, if this is desired and possible (dyn IP customers ?)

I would have to dig up my notes as I had it installed, and didn't look into it anymore. It is here 
with a few users like running: Start it up > forget it as it is running just fine. I am maybe not 
running the actual version, but....

http://filezilla.sourceforge.net/

Johannes

> thank you francis,
> 
> on a recent recommendation from someone here on the list, i decided to take
> a quick look at guild-ftp.  it's a very impressive looking piece of software
> indeed, but i eventually decided to abort that idea, due to my lack of
> understanding how 'normal' ftp services function.  though i've been using
> ftp regularly for the past 10 or 11 years, i've never actually belonged to
> an ftp file-share 'group' as such... and just don't get the whole concept of
> the 'normal' format.  the virtual directories (pub, guest, upload, etc.)
> really confuse me, as i fail to understand their unique purpose from a
> user's point if view.  previously, whether i've been hosting or being
> hosted, ftp has served strictly as a tool for the manipulation of password
> protected web-content.  because i consider my ftp requirements to be
> somewhat 'light duty', i decided to scrap the whole guild-ftp idea, and not
> try to fix something that wasn't necessarily broken.
> 
> if any of you run a 'fully functional' ftp service, or know of any such
> public services that i could test-drive (as a user), i would kindly
> appreciate an invite :).  i'm sure i could learn a lot from a little
> hands-on experience.
> 
> thanks!
> 
> rick
> 
> 
> On 11/26/06, Francis Turner <francis.turner at gmail.com> wrote:
> >
> > You ought to disable Xitami's FTP completely. Its a pretty unreliable
> > implementation. If you replace it with some other ftpd you can then
> > make sure that only non-anonymous users have access
> >
> > On 11/25/06, Rick Headly <rickhead at gmail.com> wrote:
> > > hi,
> > >
> > > i've been using xitami for a few years, to host a number of
> > > independently-owned sites and domains for others, in various locations
> > > around the globe.  each web-masters on the service, simply supplies
> > their
> > > user-name/password combo to log directly into their designated
> > web-directory
> > > (via xitami's ftp) to edit or make changes to their site.  this all
> > seems to
> > > work very well.
> > >
> > > my problem, is that some of these web-masters (upon supplying an
> > incorrect
> > > password) report finding themselves logged into the ftp-root...
> > > anonymously... and get confused because they can't find their files.
> > >
> > > i would like to completely disable anonymous logins (and the ftp root)
> > > altogether, as i'm only interested in supplying ftp-service to my
> > authorized
> > > web-masters... and only if they've supplied a valid user-name and
> > password.
> > >
> > > i simply don't want to be providing bandwidth or resources, or handling
> > > ftp-connections for just any tom, dick, or harry-bot, who happens to hit
> > me
> > > on port-21.  i see it as a security threat.  i would prefer if
> > xitami-ftp
> > > simply did not respond to anyone without a user-name and password...
> > because
> > > they aren't supposed to be there to begin with.
> > >
> > > is it possible to 'disable' the ftp-root in such a manner?
> > >
> > > if so, i'd really appreciate a few pointers in tweaking up my config.
> > >
> > > thanks!
> > >
> > > rick
> > >
> > > --
> >
> >
> 

Johannes