1
vote
2answers
58 views

FTP Multi User Environment doesn't allow multiple logins

I think ths is a general question but I'm not sure if it needs to be migrated because of the technical and security related nature of the beast in question. For my current client we have an SFTP key ...
1
vote
1answer
620 views

How to hide Folders for FTP user jailed to user home

Setup: VSFTPD FTP server Only the FTP user has access to FTP User home modded to /var/www User now has write access only to /var/www User still can browse folder structure - this is what i want ...
-4
votes
1answer
53 views

Locking sub-directories from the view of certain users [closed]

I have certain sub-dirs that I do not want certain developers to have access to when they login via FTP. They need to view most files/dirs, but some are off limits. Is there any way to block viewing ...
0
votes
1answer
603 views

Unknown logins in vsftpd - hacked? [duplicate]

I'm running logwatch and there I've seen some strange activity. There are two different ip adresses (I'll call this guy hacker) where it seems they logged in successfully through vsdftpd: hacker's IP ...
0
votes
1answer
32 views

is webmail db acessable through ftp

Recently we've had several attempts to access our ftp account from an outside source, (we've since locked the account). I was wandering if we use hosted webmail, such a open xchange, horde or atmail ...
-1
votes
2answers
62 views

Is FTP secure at the client end [closed]

If a client PHP application is periodically accessing a remote server via FTP, is there any security risks for the client? I understand FTP is not inherently a secure protocol, but is this only the ...
-1
votes
3answers
159 views

How to automatically copy a file uploaded by a user by FTP in Linux (CentOS)?

Outside contractor says they need read/write/execute permissions on part of the filesystem so they can run a script. I'm ok with that, but I want to know what they're running, in case it turns out ...
0
votes
3answers
123 views

Reporting Penetration Attempts to My Server

I need a log file of penetration attempts to my server. Ideally, this log should contain all attempts including logins, HTTPD activities, FTP activities, NFS, and other conventional open ports. ...
0
votes
1answer
66 views

a safe way to provide multiple ftp credentials?

We have a web development company and have ftp credentials for over 300 customers. Is there a method to provide access to employees without giving them username and password? Kind of how credit card ...
1
vote
2answers
309 views

vsftpd and home directories of chrooted local users

NOTE: Users are chrooted and their local_root is set to /srv/ftp. Why vsftpd forces local chrooted users to have home directory? It will refuse to work if there is not any. And I've found the ...
0
votes
1answer
574 views

PureFTPd and symlinks

I'm running Pure-FTPD on centos 5 with cPanel installed. When somebody upload a symlink file called 1.txt and it's a symlink to /partition for example, He can browse all /partition contents from this ...
0
votes
2answers
495 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
1
vote
1answer
150 views

FTP SITE CHMOD Error

When trying to edit file/folder permissions via FTP I am getting the error: 505 Security server forbids SITE commands. Contact admin. I am currently using VSFTPD with the config value ...
0
votes
1answer
2k views

PureFTPd : How to have user isolation?

I've installed pureFTPd, with a mysql database on a debian distribution. I used the following tutorial. But now if I'm logging, I see that I'm in the /Data/www/MyUserDirectory. AND I can browse to /. ...
14
votes
6answers
5k views

What are some secure alternatives to FTP? [closed]

This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy. I know about and use scp already, but sometimes I want to share files with someone ...
0
votes
1answer
300 views

Setting up FileZilla to only listen for a certain domain

Somebody had been trying to brute force my FTP server with a username the doesn't even exist, but it got me thinking I should upgrade my security. It would be impractical to filter by IP as the places ...
0
votes
1answer
710 views

Setting vsftpd to allow me uploading to /var/www, got 500 OOPS: cannot change directory:/root

I'm using an Amazon EC2 istance as developer and testing machine. Since i'm on windows i can't mount the virtual EBS volume for editing purposes. Too bad. For this reason i've installed and ...
18
votes
2answers
2k views

nologin in /etc/shells is dangerous.. WHY?

I found this on the internet, while putting up a FTP server in FreeBSD. Putting nologin into /etc/shells potentially creates a back door by which those accounts can be used with FTP. (see: ...
1
vote
1answer
43 views

How can I determine which users are authenticating via ftp or telnet?

I've inherited a system that has both telnet and ftp enabled. As both these send passwords in cleartext I want to disable them. But many users have never changed their ways to use sftp or ssh. And ...
5
votes
6answers
795 views

Temporary FTP accounts?

I'm doing some work for a printing company right now. They'd like to setup a more secure FTP situation. It seems like, from what they've described to me, most printing companies have a general FTP ...
0
votes
5answers
162 views

File transfer sftp secure?

Suppose I have a text file with confidential information. I want to transfer from American facility to the france facility via sftp set up in a website. Is the file transfer secure?
0
votes
2answers
190 views

FTP, Windows server 2008 r2, windows firewall problems

Okay so Google is letting me down just due to the sheer volume of stuff related but not specific to my problem that I could find. I have a c# program that connects to various ftp sites and downloads ...
1
vote
3answers
1k views

Risks of using active FTP mode instead of the passive mode

On a server I'm using a Perl script which is scheduled to regularly download a few files using FTP from another server. Unfortunately, there's some issue in the Perl FTP module which causes the script ...
1
vote
1answer
297 views

shut down FTP from IIS 6 after <X> failed login attempts

Is there a setting in IIS 6 to turn an FTP site off after a specified number of failed login attempts? It has already been documented on this site that a Windows server sitting on a static IP address ...
1
vote
1answer
1k views

FTP virtual hosting proxy

I'm setting up OpenVZ to divide several of my sites from each other. I have one external ip address which I use to serve my sites. I'm using nginx to proxy http requests to nginx in each container ...
0
votes
2answers
1k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
0
votes
6answers
450 views

Secure data transfer from a RHEL 5 box

I have been researching this for a while but cant find and conclusive answeres. FTP - Very insecure. FTP over SSl - Not fully supported everywhere, only a few clients support it? SFTP - This is the ...
1
vote
1answer
143 views

can i block zip files upload on server (godaddy linux shared hosting)?

can i block zip files upload on server (godaddy linux shared hosting) ? Acutally i have to provide ftp access to my employees and dont want them to upload zip or rar files.Can i prevent such uploads ...
0
votes
3answers
513 views

Can I give someone an FTP account so they can only see and edit the files they have made?

Me and several other people all have FTP access to the same folder. We're working on a website together but I don't want to give the other coders complete access to my site. I only want them to be ...
1
vote
3answers
157 views

What are the security concerns with running ftp on a remote linux/debian server?

I have a rackspace hosted debian instance and need to copy sensitive files up to it. I'm thinking of setting up an ftp server but have concerns about security as i believe credentials are passed in ...
0
votes
1answer
715 views

How to create a user in ubuntu for ftp, and lock the account to a specific ftp folder

I want to create a ftp user on my ubuntu server, and lock the user to a specific folder to read/write to. I read I use the /usr/sbin/useradd but I don't see how I set the password? thanks in advance ...
0
votes
4answers
132 views

Preventing programmer from copying information

Is there a way to block files, coding, etc. from being copied when giving a new programmer ftp access to do research prior to submitting a quote?
0
votes
1answer
132 views

IIS FTP Block Specific File Uploads

We host numerous ftp sites on a single Windows 2003 server (using IIS and Active Directory to manage the sites and users). One of the sites is public (unrestricted), but we have a bot that's been ...
2
votes
2answers
11k views

How to “jail” a ftp user inside its home directory (proftpd)?

I have a user named "ftp3" that belong to group "ftpusers-temp". The home of that user is home/FTP-shared/temp In proftpd.conf I have the following 2 directives: DefaultRoot /home/FTP-shared ...
1
vote
6answers
108 views

Is a file any 'safer' when FTPed inside a plain old zip file then if it was FTPed as a txt file

For example, a csv of demographic data. Over Plain FTP (not SFTP or FTPS or WebDav).
0
votes
1answer
271 views

How to set up Drupal Plugin Manager on MAMP in a secure way?

I use MAMP PRO as global webserver. First of all, is it a good idea? Secondly, my objective is to run a Drupal website with as easy management as possible. Now I want to use Plugin Manager module to ...
0
votes
1answer
169 views

What could cause random files being uploaded without permission?

I have been having issues lately with a certain directory. It seems someone is placing files into it, or something of that sort, and any attempt to delete them is successful, HOWEVER they reappear ...
4
votes
2answers
1k views

What is the secure way to isolate ftp server users on unix?

I've read documentation for various ftp daemons and various long threads about the security implications of using a chroot environment for an ftp server when giving users write access. If you read the ...
0
votes
3answers
1k views

Deny directory browsing in a Proftpd / Ubuntu Installation

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run ls and is able to change to any Directory and browse freely on the ...
0
votes
1answer
226 views

Safe UNIX permissions on Ubuntu / ProFTP install

I've got a python script running on some client machines that calls home to an Ubuntu 8.04 LTS server running ProFTP.. I created a user called userftp on the server and have hopefully denied it shell ...
2
votes
5answers
647 views

Why does anyone use ftp?

I am a newbie, so maybe I'm missing something. Why would anyone use ftp or telnet for site administration? If they use them, why would they wonder how they've been hacked? Isn't it obvious that all ...
0
votes
2answers
1k views

LAMP setup + FTP - problem with user privileges

I'm sorry for uber noobish question, I'm new to linux and trying to learn and practice secure LAMP administration for upcoming little project of mine. I've installed vsftpd but can't setup ...
0
votes
5answers
943 views

Recommend an SFTP solution for Windows (Server & Client) that integrates well with Dreamweaver [duplicate]

Possible Duplicate: SSH / SCP Server on Windows Could you please recommend a secure FTP solution for updating files on a remote windows server from windows workstations? We would like to ...
3
votes
7answers
1k views

What can I do to replace FTP?

I'd like to replace FTP access with systems that are more secure. Sending passwords in plain text with no encryption is unacceptable and with single-sign-on growing, becoming less acceptable daily. ...
2
votes
4answers
216 views

Looking for FTP server recommendations for BSD [closed]

I'm currently deciding on what ftp server we should use for an internal system that we have running FreeBSD 6.2. The requirements that we'll need are the following: must be able to handle SSL, as ...
0
votes
2answers
916 views

Trouble getting FTP login to work in IIS6

I'm trying to setup an FTP site for one of my clients to retrieve files from my organization using IIS6. I've created the FTP site, have set to not isolate users (not necessary as FTP will be read ...
1
vote
4answers
10k views

Password protect file folders on FTP site

We have an FTP site with a single username/password that we provide to people as they need it. We are unable to create a new username/password for every person that might need to access the site, but ...
2
votes
12answers
373 views

Secure File Transfer Site

I need to setup a site to share files with clients. Everything about it has to be secure so, I don't want to use straight FTP. The other requirement is that it has to be easy to use as the people that ...
1
vote
3answers
275 views

lookin for ftp proxy

Does somebody know about ftp proxy server ? the idea is to put "transparent" ftp server that will sit between the client and the real server and will run some checks in order to decide whatever the ...
0
votes
1answer
415 views

proftpd user rights

I have a ftp user chrooted to a sub directory of another user which can read and write but the main user needs to be able to edit the files also like this: /user1/ /user1/user2/ how can I get this ...