I run the vsftpd as stand alone because i dont know how to start it through the xinetd. Well, do you know to apply the wrappers for my vsftpd? I want to legitimate the logins and to be honest i only receive requests from a specific ip. ----- Original Message ----- From: "James Ogley" To: "SuSE List" Sent: Wednesday, March 24, 2004 11:28 AM Subject: Re: [SLE] Vsftp and anonymus login

...

However searching the vsftp.log i discovered that some ip tried and logon to my system as USER anonymus with no password and USER ftp with no password. However, these accounts leads to nowhere with no right, it quite dangerous for me.

Short of disabling the FTP server altogether, which I assume you don't want to do, there's not a lot you can do to prevent people trying to login anonymously. That doesn't mean they'll be successful of course :)

If you know that legitimate FTP connections are only going to come from certain places, or are definitely /not/ going to come from certain places, you can use TCP wrappers to allow and deny access. By default vsftpd runs from [x]inetd, I don't know about xinetd, but inetd will be setup to use tcpd. Read man hosts.allow and man hosts.deny to see how to craft allow and deny rules. -- James Ogley, Webmaster, Rubber Turnip james@rubberturnip.org.uk http://www.rubberturnip.org.uk Jabber: riggwelter@myjabber.net Using Free Software since 1994, running GNU/Linux (SuSE 9.0) GNOME updates for SuSE: http://www.usr-local-bin.org

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

John wrote:

...

I run the vsftpd as stand alone because i dont know how to start it

Allright, and how to use the wrapper for the vsftpd now? ----- Original Message ----- From: "Martin Mielke" To: "John" Cc: "SuSE List" Sent: Wednesday, March 24, 2004 12:29 PM Subject: Re: [SLE] Vsftp and anonymus login through

...

the xinetd.

cat /etc/xinetd.d/vsftpd # default: off # description: # The vsftpd FTP server serves FTP connections. It uses # normal, unencrypted usernames and passwords for authentication. # vsftpd is designed to be secure. service ftp { socket_type = stream protocol = tcp wait = no user = root server = /usr/sbin/vsftpd # server_args = # log_on_success += DURATION USERID # log_on_failure += USERID # nice = 10 disable = no }

HTH, Martin

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

What does the ALL@MyIP is for in the tcpwraper files (allow & deny) I mean the ALL only :) ----- Original Message ----- From: "Martin Mielke" To: "Suse" Sent: Wednesday, March 24, 2004 2:04 PM Subject: Re: [SLE] Vsftp and anonymus login

Hi,

John wrote:

...

Allright, and how to use the wrapper for the vsftpd now?

Well, tcpd is tailored by those two files already mentioned:

/etc/hosts.allow

ALL: 1.2.3.4,9.10.11.12 (these should be *real* IP addresses)

/etc/hosts.deny

ALL: ALL: /usr/bin/mailx -s "%d: connection attempt from %c" root@your-domain

Also take a look at the proper man pages for further info.

HTH, Martin

...

----- Original Message ----- From: "Martin Mielke" To: "John" Cc: "SuSE List" Sent: Wednesday, March 24, 2004 12:29 PM Subject: Re: [SLE] Vsftp and anonymus login

...

John wrote:

...

I run the vsftpd as stand alone because i dont know how to start it

through

...

...

the xinetd.

cat /etc/xinetd.d/vsftpd # default: off # description: # The vsftpd FTP server serves FTP connections. It uses # normal, unencrypted usernames and passwords for authentication. # vsftpd is designed to be secure. service ftp { socket_type = stream protocol = tcp wait = no user = root server = /usr/sbin/vsftpd # server_args = # log_on_success += DURATION USERID # log_on_failure += USERID # nice = 10 disable = no }

HTH, Martin

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

Thanks for you help Martin! ----- Original Message ----- From: "Martin Mielke" To: "Suse" Sent: Wednesday, March 24, 2004 2:43 PM Subject: Re: [SLE] Vsftp and anonymus login

John,

RTFM!!!

Look in /usr/share/doc/packages/tcpd for more documentation on this issue. There's a README that explains it all.

Some links you can find doing a simple search on google.com:

http://www.clug.org/presentations/security/tcpwrappers.html

This is for RedHat, but should apply to SuSE as well:

http://www.redhat.com/docs/manuals/linux/RHL-7.2-Manual/ref-guide/ch-tcpwrap...

Regards, Martin

John wrote:

...

What does the ALL@MyIP is for in the tcpwraper files (allow & deny)

I mean the ALL only :)

----- Original Message ----- From: "Martin Mielke" To: "Suse" Sent: Wednesday, March 24, 2004 2:04 PM Subject: Re: [SLE] Vsftp and anonymus login

...

Hi,

John wrote:

...

Allright, and how to use the wrapper for the vsftpd now?

Well, tcpd is tailored by those two files already mentioned:

/etc/hosts.allow

ALL: 1.2.3.4,9.10.11.12 (these should be *real* IP addresses)

/etc/hosts.deny

ALL: ALL: /usr/bin/mailx -s "%d: connection attempt from %c" root@your-domain

Also take a look at the proper man pages for further info.

HTH, Martin

...

----- Original Message ----- From: "Martin Mielke" To: "John" Cc: "SuSE List" Sent: Wednesday, March 24, 2004 12:29 PM Subject: Re: [SLE] Vsftp and anonymus login

...

John wrote:

...

I run the vsftpd as stand alone because i dont know how to start it

through

...

...

the xinetd.

cat /etc/xinetd.d/vsftpd # default: off # description: # The vsftpd FTP server serves FTP connections. It uses # normal, unencrypted usernames and passwords for authentication. # vsftpd is designed to be secure. service ftp { socket_type = stream protocol = tcp wait = no user = root server = /usr/sbin/vsftpd # server_args = # log_on_success += DURATION USERID # log_on_failure += USERID # nice = 10 disable = no }

HTH, Martin

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com

On Thursday 01 April 2004 18:31, jonlists wrote: snip

Is there any way to obtain Suse 8.2 on CD - the site's bandwidth is limited, and will not allow a FTP install. I already own 9.0, but due to support level required by the commercial software, need to use 8.2. I cannot find it online, nor at any store - ideas on this welcome.

Thanks for info......

Jon Johnston

I'll call you tomorrow AM. Maybe I can help. Stan