[CLUE-Tech] Linux FTP server accessible from Windows98
Sue Bauer-Lee
sblee at tazmania.org
Wed May 16 13:14:07 MDT 2001
To prevent unauthorized user access, try using /dev/null instead of
/usr/bin/false or /bin/false for user shells. Be sure to add this to /etc/shells
and remove any unecessary shells from that file if it already exists.
On Wed, May 16, 2001 at 09:36:33AM -0600, Dan Harris wrote:
> Mark,
>
> I use ProFTPD exclusively on my FTP servers. As Grant pointed out,
> passwords are transmitted as clear text when using FTP, so it's definitely
> not a secure system. However, managed properly, it can be a valuable
> asset. scp (secure copy) is great for *nix to *nix copying, but the
> windows app that supports this, "puTTY", is a little tougher to implement
> compared to FTP, since FTP clients are so ubiquitous. If you need a secure
> solution, definitely try out scp-based solutions (are there any other than
> puTTY?).
>
> Also, a tip, if you do use FTP:
>
> Don't give your FTP users a shell account if they don't need it! Make an
> empty file called /usr/bin/false, using your favorite editor, or using this
> command:
>
> echo "" > /usr/bin/false
>
> After adding your FTP user, edit /etc/passwd, find the line that starts
> with their login and change the shell from /bin/bash to /usr/bin/false.
>
> If anyone does happen to "sniff" out an FTP login and get a password, it
> does more to prevent them from getting a shell and doing further damage
> with that user account.
>
> -Dan Harris
>
> > Hello,
> >
> > I am looking for a Linux FTP server solution. The server would need to
> > be accessible through the local area network from a Windows98 station
> > to transfer files (to be posted at the FTP site).
> >
> > If you are in the Denver area and have knowledge of this solution or
> > know where to find documentation please send me an e-mail. I have Linux
> > installed but I am new to the Linux operating system.
> >
> > Thanks,
> >
> > Mark
>
>
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech
-----------------------------------------------------
Sue Bauer-Lee | KE4HNN
PO Box 2900 |
Lilburn, GA 30048 | Email: sblee at tazmania.org
-----------------------------------------------------
More information about the clue-tech
mailing list