From owner-freebsd-current  Wed Sep 12 21:33:53 2001
Delivered-To: freebsd-current@freebsd.org
Received: from ns1.avatar.com (ns1.avatar.com [199.33.206.1])
	by hub.freebsd.org (Postfix) with ESMTP
	id C079937B40D; Wed, 12 Sep 2001 21:33:47 -0700 (PDT)
Received: from tomcat (tomcat.avatar.com [199.33.206.20])
	by ns1.avatar.com (8.12.0.Beta8/8.12.0.Beta8) with SMTP id f8D4XkUM015238;
	Wed, 12 Sep 2001 21:33:47 -0700 (PDT)
From: "Kory Hamzeh" <kory@avatar.com>
To: "Ted Mittelstaedt" <tedm@toybox.placo.com>,
	"Giorgos Keramidas" <charon@labs.gr>,
	"P. U. (Uli) Kruppa" <root@pukruppa.de>
Cc: <current@FreeBSD.ORG>, <freebsd-questions@FreeBSD.ORG>
Subject: RE: anonymous-ftp cracked
Date: Wed, 12 Sep 2001 21:33:50 -0700
Message-ID: <000801c13c0d$4969dac0$14ce21c7@avatar.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Importance: Normal
In-Reply-To: <001501c13c0c$7d077780$1401a8c0@tedm.placo.com>
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

Yup, I had some jerk constantly fill up the filesystem of the ftp directory
until I finally disabled all uploads. The ethics of some people just amazes
me.

> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Ted
> Mittelstaedt
>
> >-----Original Message-----
> >From: owner-freebsd-questions@FreeBSD.ORG
> >[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Giorgos
> >Keramidas
> >
> >Another common thing done in writable incoming/ directories is
> to create a
> >file of fixed size, say 100 Mb, and use vnconfig to mount this
> file as the
> >incoming/ directory of an FTP server.  Then there's only about 100 Mb of
> >space available in your incoming/ and nobody can store tons of
> data in there,
> >wasting your disk space until disks are full.
> >
>
> Hi Uli and Giorgos,
>
>   I've had a bit of experience with this sort of thing and I have
> to say that
> nobody should be running an open FTP server that allows uploading
> to anyone
> unless they are willing to take the time to monitor it - and I mean every
> day, preferably several times a day.
>
> 100MB is plenty of space for some jerk to upload his collection
> of Sally SpreadEagle in all her silicon glory.  If that happens
> your going to find every bit of outbound bandwidth you have completely
> saturated.  If your unlucky enough to have your FTP server at an
> ISP you may find yourself fined heavily  (ie: overage charges)
>
>   Some people have a little script that runs out of cron and diffs the
> output of ls against the previous run and e-mails the maintainer when new
> files show up, others simply check by eye.  Whatever works for
> you is fine,
> but don't think that you can just put out public storage for anyone to use
> as they see fit and just ignore it anymore.
>
>
> Ted Mittelstaedt


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message