[nonspam] Re: [Xitami] disabling ftp-root

[Rick Headly]

thank you kindly johannes (and magnus),

for all the great information and words of encouragement ;)

i believe another question of mine was addressed here as well, and that's my
concerns about the stability of these applications, and their ability to run
unattended for extended periods of time on older hardware, without chewing
up a lot of resources and bogging down.

i will most likely install these on a test-system first, and play around a
bit... until i finally get a good feel for what's going on, and what they're
all about... and go from there.

thanks again!  :)

rick


On 11/27/06, Johannes Prost <xitami at pastryworld.ca> wrote:
>
> Rick,
>
> I am using FileZilla server and client and it is pretty straight forward.
> I am not an ftp guru
> either, but it works pretty well. The nice thing which I like with file
> zilla server, you can set
> the IP's you want to connect to the server, if this is desired and
> possible (dyn IP customers ?)
>
> I would have to dig up my notes as I had it installed, and didn't look
> into it anymore. It is here
> with a few users like running: Start it up > forget it as it is running
> just fine. I am maybe not
> running the actual version, but....
>
> http://filezilla.sourceforge.net/
>
> Johannes
>
> > thank you francis,
> >
> > on a recent recommendation from someone here on the list, i decided to
> take
> > a quick look at guild-ftp.  it's a very impressive looking piece of
> software
> > indeed, but i eventually decided to abort that idea, due to my lack of
> > understanding how 'normal' ftp services function.  though i've been
> using
> > ftp regularly for the past 10 or 11 years, i've never actually belonged
> to
> > an ftp file-share 'group' as such... and just don't get the whole
> concept of
> > the 'normal' format.  the virtual directories (pub, guest, upload, etc.)
> > really confuse me, as i fail to understand their unique purpose from a
> > user's point if view.  previously, whether i've been hosting or being
> > hosted, ftp has served strictly as a tool for the manipulation of
> password
> > protected web-content.  because i consider my ftp requirements to be
> > somewhat 'light duty', i decided to scrap the whole guild-ftp idea, and
> not
> > try to fix something that wasn't necessarily broken.
> >
> > if any of you run a 'fully functional' ftp service, or know of any such
> > public services that i could test-drive (as a user), i would kindly
> > appreciate an invite :).  i'm sure i could learn a lot from a little
> > hands-on experience.
> >
> > thanks!
> >
> > rick
> >
> >
> > On 11/26/06, Francis Turner <francis.turner at gmail.com> wrote:
> > >
> > > You ought to disable Xitami's FTP completely. Its a pretty unreliable
> > > implementation. If you replace it with some other ftpd you can then
> > > make sure that only non-anonymous users have access
> > >
> > > On 11/25/06, Rick Headly <rickhead at gmail.com> wrote:
> > > > hi,
> > > >
> > > > i've been using xitami for a few years, to host a number of
> > > > independently-owned sites and domains for others, in various
> locations
> > > > around the globe.  each web-masters on the service, simply supplies
> > > their
> > > > user-name/password combo to log directly into their designated
> > > web-directory
> > > > (via xitami's ftp) to edit or make changes to their site.  this all
> > > seems to
> > > > work very well.
> > > >
> > > > my problem, is that some of these web-masters (upon supplying an
> > > incorrect
> > > > password) report finding themselves logged into the ftp-root...
> > > > anonymously... and get confused because they can't find their files.
> > > >
> > > > i would like to completely disable anonymous logins (and the ftp
> root)
> > > > altogether, as i'm only interested in supplying ftp-service to my
> > > authorized
> > > > web-masters... and only if they've supplied a valid user-name and
> > > password.
> > > >
> > > > i simply don't want to be providing bandwidth or resources, or
> handling
> > > > ftp-connections for just any tom, dick, or harry-bot, who happens to
> hit
> > > me
> > > > on port-21.  i see it as a security threat.  i would prefer if
> > > xitami-ftp
> > > > simply did not respond to anyone without a user-name and password...
> > > because
> > > > they aren't supposed to be there to begin with.
> > > >
> > > > is it possible to 'disable' the ftp-root in such a manner?
> > > >
> > > > if so, i'd really appreciate a few pointers in tweaking up my
> config.
> > > >
> > > > thanks!
> > > >
> > > > rick
> > > >
> > > > --
> > >
> > >
> >
>
> Johannes
>
>
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.imatix.org/pipermail/xitami/attachments/20061128/1247c87b/attachment.htm