[CLUE-Tech] Linux FTP server accessible from Windows98

Sue Bauer-Lee sblee at tazmania.org
Wed May 16 13:14:07 MDT 2001


To prevent unauthorized user access, try using /dev/null instead of 
/usr/bin/false or /bin/false for user shells. Be sure to add this to /etc/shells
and remove any unecessary shells from that file if it already exists.

On Wed, May 16, 2001 at 09:36:33AM -0600, Dan Harris wrote:
> Mark,
> 
> I use ProFTPD exclusively on my FTP servers.  As Grant pointed out, 
> passwords are transmitted as clear text when using FTP, so it's definitely 
> not a secure system.  However, managed properly, it can be a valuable 
> asset.  scp (secure copy) is great for *nix to *nix copying, but the 
> windows app that supports this, "puTTY", is a little tougher to implement 
> compared to FTP, since FTP clients are so ubiquitous.  If you need a secure 
> solution, definitely try out scp-based solutions (are there any other than 
> puTTY?).  
> 
> Also, a tip, if you do use FTP:
> 
> Don't give your FTP users a shell account if they don't need it!  Make an 
> empty file called /usr/bin/false, using your favorite editor, or using this 
> command:
> 
> echo "" > /usr/bin/false
> 
> After adding your FTP user, edit /etc/passwd, find the line that starts 
> with their login and change the shell from /bin/bash to /usr/bin/false.  
> 
> If anyone does happen to "sniff" out an FTP login and get a password, it 
> does more to prevent them from getting a shell and doing further damage 
> with that user account.
> 
> -Dan Harris
> 
> > Hello,
> > 
> > I am looking for a Linux FTP server solution. The server would need to
> > be accessible through the local area network from a Windows98 station
> > to transfer files (to be posted at the FTP site). 
> > 
> > If you are in the Denver area and have knowledge of this solution or
> > know where to find documentation please send me an e-mail. I have Linux
> > installed but I am new to the Linux operating system.
> > 
> > Thanks,
> > 
> > Mark 
> 
> 
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech

-----------------------------------------------------
Sue Bauer-Lee          |    KE4HNN
PO Box 2900            |    
Lilburn, GA 30048      |    Email: sblee at tazmania.org
-----------------------------------------------------



More information about the clue-tech mailing list