[plug] re: FTP set-up

Matt Kemner zombie at wasp.net.au
Fri Jun 30 09:35:18 WST 2000


On Thu, 29 Jun 2000, Jon L. Miller wrote:

> Anyone care to give pointers on setting up a secure FTP site (eg non
> anonftp)?

I think enough people have mentioned the plain-text password security
risk, so I wont.

Install proftpd, and add an entry to the config file like:

<Anonymous ~potato>
   AnonRequirePassword on
   User potato
   Group users
   RequireValidShell off
   <Directory *>
     <Limit WRITE>
       DenyAll
     </Limit>
   </Directory>
</Anonymous>

Then add a user "potato" to your system and restart proftpd.
Then, if someone ftp's in with potato (and the correct password) they will
be restricted to their home directory in the same way anonymous users are
restricted to the /home/ftp directory. (using chroot)

 - Matt




More information about the plug mailing list