Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Sep 2001 10:47:49 +0200 (CEST)
From:      Oliver Fromme <olli@secnetix.de>
To:        freebsd-current@FreeBSD.ORG
Subject:   Re: anonymous-ftp cracked
Message-ID:  <200109130847.KAA43442@lurza.secnetix.de>
In-Reply-To: <000801c13c0d$4969dac0$14ce21c7@avatar.com>

next in thread | previous in thread | raw e-mail | index | archive | help
[broken quoting fixed]

Kory Hamzeh <kory@avatar.com> wrote:
 > Ted Mittelstaedt wrote:
 > >   I've had a bit of experience with this sort of thing and I have
 > > to say that
 > > nobody should be running an open FTP server that allows uploading
 > > to anyone
 > > unless they are willing to take the time to monitor it - and I mean every
 > > day, preferably several times a day.
 > > [...]
 > 
 > Yup, I had some jerk constantly fill up the filesystem of the ftp directory
 > until I finally disabled all uploads. The ethics of some people just amazes
 > me.

If you absolutely need to have an anonymous upload directory,
it is probably a good idea to disable ls and read-permission
in that directory.  That way people can upload things, but
they can neither list nor download them without prior operator
intervention.

Regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co KG, Oettingenstr. 2, 80538 München
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

"All that we see or seem is just a dream within a dream" (E. A. Poe)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200109130847.KAA43442>