Thanks for you help Martin! ----- Original Message ----- From: "Martin Mielke" <martin.mielke@thales-is.com> To: "Suse" <suse-linux-e@suse.com> Sent: Wednesday, March 24, 2004 2:43 PM Subject: Re: [SLE] Vsftp and anonymus login
John,
RTFM!!!
Look in /usr/share/doc/packages/tcpd for more documentation on this issue. There's a README that explains it all.
Some links you can find doing a simple search on google.com:
http://www.clug.org/presentations/security/tcpwrappers.html
This is for RedHat, but should apply to SuSE as well:
http://www.redhat.com/docs/manuals/linux/RHL-7.2-Manual/ref-guide/ch-tcpwrap...
Regards, Martin
John wrote:
What does the ALL@MyIP is for in the tcpwraper files (allow & deny)
I mean the ALL only :)
----- Original Message ----- From: "Martin Mielke" <martin.mielke@thales-is.com> To: "Suse" <suse-linux-e@suse.com> Sent: Wednesday, March 24, 2004 2:04 PM Subject: Re: [SLE] Vsftp and anonymus login
Hi,
John wrote:
Allright, and how to use the wrapper for the vsftpd now?
Well, tcpd is tailored by those two files already mentioned:
/etc/hosts.allow
ALL: 1.2.3.4,9.10.11.12 (these should be *real* IP addresses)
/etc/hosts.deny
ALL: ALL: /usr/bin/mailx -s "%d: connection attempt from %c" root@your-domain
Also take a look at the proper man pages for further info.
HTH, Martin
----- Original Message ----- From: "Martin Mielke" <martin.mielke@thales-is.com> To: "John" <isofroni@cc.uoi.gr> Cc: "SuSE List" <suse-linux-e@suse.com> Sent: Wednesday, March 24, 2004 12:29 PM Subject: Re: [SLE] Vsftp and anonymus login
John wrote:
I run the vsftpd as stand alone because i dont know how to start it
through
the xinetd.
cat /etc/xinetd.d/vsftpd # default: off # description: # The vsftpd FTP server serves FTP connections. It uses # normal, unencrypted usernames and passwords for authentication. # vsftpd is designed to be secure. service ftp { socket_type = stream protocol = tcp wait = no user = root server = /usr/sbin/vsftpd # server_args = # log_on_success += DURATION USERID # log_on_failure += USERID # nice = 10 disable = no }
HTH, Martin
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com