So imagine yourself I would do the following FTP setup. Would my "isolated" folder actually be isolated and safe or do I actually run the risk of clients breeching through the borders of that folder?
These are the steps I have identified:
- Create a user account without a home directory.
- Activate the FTP Server.
- Set the FTP's server root to Library/FTPServer/FTPRoot/Dropbox.
- Choose that authenticated users can see "FTP Root with Share Points".
- Give the Dropbox-folder read/write-access to any authenticated user.
- Add the Dropbox-folder as a SharePoint so that I can "mount" the folder when on internal wi-fi, not having to go via ftp.
- Dissa
- Create a symlink (ln -s) like: Users/Shared/Dropbox -> Library/FTPServer/FTPRoot/Dropbox
- Allow FTP access to the server, but only for that account.
- Start the server
So now I can reach this single folder via FTP from the outside, but can't seem to be able to move outside of this folder (which is of course wanted). And from the inside (same wi-fi) I have full access rights to the shared folder.
Am I doing this incorrectly? Is the level of security here reasonable or does it actually involve apparent risks?
Thanks in advance.
