Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Sep 2001 21:33:50 -0700
From:      "Kory Hamzeh" <kory@avatar.com>
To:        "Ted Mittelstaedt" <tedm@toybox.placo.com>, "Giorgos Keramidas" <charon@labs.gr>, "P. U. (Uli) Kruppa" <root@pukruppa.de>
Cc:        <current@FreeBSD.ORG>, <freebsd-questions@FreeBSD.ORG>
Subject:   RE: anonymous-ftp cracked
Message-ID:  <000801c13c0d$4969dac0$14ce21c7@avatar.com>
In-Reply-To: <001501c13c0c$7d077780$1401a8c0@tedm.placo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Yup, I had some jerk constantly fill up the filesystem of the ftp directory
until I finally disabled all uploads. The ethics of some people just amazes
me.

> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Ted
> Mittelstaedt
>
> >-----Original Message-----
> >From: owner-freebsd-questions@FreeBSD.ORG
> >[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Giorgos
> >Keramidas
> >
> >Another common thing done in writable incoming/ directories is
> to create a
> >file of fixed size, say 100 Mb, and use vnconfig to mount this
> file as the
> >incoming/ directory of an FTP server.  Then there's only about 100 Mb of
> >space available in your incoming/ and nobody can store tons of
> data in there,
> >wasting your disk space until disks are full.
> >
>
> Hi Uli and Giorgos,
>
>   I've had a bit of experience with this sort of thing and I have
> to say that
> nobody should be running an open FTP server that allows uploading
> to anyone
> unless they are willing to take the time to monitor it - and I mean every
> day, preferably several times a day.
>
> 100MB is plenty of space for some jerk to upload his collection
> of Sally SpreadEagle in all her silicon glory.  If that happens
> your going to find every bit of outbound bandwidth you have completely
> saturated.  If your unlucky enough to have your FTP server at an
> ISP you may find yourself fined heavily  (ie: overage charges)
>
>   Some people have a little script that runs out of cron and diffs the
> output of ls against the previous run and e-mails the maintainer when new
> files show up, others simply check by eye.  Whatever works for
> you is fine,
> but don't think that you can just put out public storage for anyone to use
> as they see fit and just ignore it anymore.
>
>
> Ted Mittelstaedt


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000801c13c0d$4969dac0$14ce21c7>