Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : How to disable anonymous FTP access?



Threaded Mode | Print  

 How to disable anonymous FTP access? (6 Replies, Read 47334 times)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
How to disable Anonymous FTP access?


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

How to disable anonymous FTP access?
valley
Group: Webuzo Team
Post Group: Super Member
Posts: 1644
Status:
The following changes in pure ftpd configuration file should do the trick

# Don't allow authenticated users - have a public anonymous FTP only.
AnonymousOnly yes
# Disallow anonymous connections. Only allow authenticated users.
NoAnonymous no

change to

# Don't allow authenticated users - have a public anonymous FTP only.
AnonymousOnly no
# Disallow anonymous connections. Only allow authenticated users.
NoAnonymous yes

Hope this helps

Make sure you restart the FTP service after making the changes
http://webuzo.com/wiki/Restart_services

-----------------------
Webuzo : Single User Control Panel
Join Webuzo :
Facebook
Twitter

IP: --   

How to disable anonymous FTP access?
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
With Anonymous FTP enabled anyone can upload file into server?

By default i see is enable, is better disable for security?


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

How to disable anonymous FTP access?
valley
Group: Webuzo Team
Post Group: Super Member
Posts: 1644
Status:
The default is enabled. You can certainly tweak and disable it.

-----------------------
Webuzo : Single User Control Panel
Join Webuzo :
Facebook
Twitter

IP: --   

How to disable anonymous FTP access?
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Quote From : valley June 13, 2015, 1:02 pm
The default is enabled. You can certainly tweak and disable it.


Yes, thank you valley but what anonymous log in menas?
I only see if i put my server IP in FTP and set anonymous connection I'M able to connecting to the server without need password and can upload file??

So everyone can upload malware or file in my server?

If the reply is yes than i should try to disable, if the reply is no, no security risk i can keep as is now.

Please help me to understand.
Thanks!

I'm also hope TLS FTP connection will be implemented.
Also maybe support of ASCII caracter.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

How to disable anonymous FTP access?
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Yes, thank you valley but what anonymous log in menas?

I only see if i put my server IP in FTP and set anonymous connection
I'M able to connecting to the server without need password and can
upload file??



So everyone can upload malware or file in my server?



If the reply is yes than i should try to disable, if the reply is no, no security risk i can keep as is now.



Please help me to understand.

Thanks!


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

How to disable anonymous FTP access?
valley
Group: Webuzo Team
Post Group: Super Member
Posts: 1644
Status:
Quote
I'M able to connecting to the server without need password and can
upload file??


It does not mean you will be able to FTP without pass.
You can certainly disable if it is a threat.


-----------------------
Webuzo : Single User Control Panel
Join Webuzo :
Facebook
Twitter

IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is May 1, 2024, 4:43 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.314