Date: Wed, 17 Oct 2001 09:40:52 -0500 From: jacks@sage-american.com To: "P. U. (Uli) Kruppa" <root@pukruppa.de>, Scott Gerhardt <scott@gerhardt-it.com> Cc: Sol <sol@cyberglobe.net>, <freebsd-questions@FreeBSD.ORG> Subject: Re: ftp security Message-ID: <3.0.5.32.20011017094052.01973238@mail.sage-american.com> In-Reply-To: <20011017032837.L58889-100000@big> References: <3BCCA414.477CCC8A@gerhardt-it.com>
next in thread | previous in thread | raw e-mail | index | archive | help
...or if uploads are to be allowed, set up a cron job to scan the directory and email you at regular intervals.... that way, stuff won't be there undiscovered very long... At 03:39 AM 10.17.2001 +0000, P. U. (Uli) Kruppa wrote: > >I had exactly the same thing happening to me. >I simply deleted the 625 MB (!) trash and was never 'tagged' >again. >You have to decide if you need a world-writable incoming >file or not. >If not, set it to read-only and that was it. >If yes, have a look at incoming every now and then, which is >what it is there for, anyway. > >Uli. > > >On Tue, 16 Oct 2001, Scott Gerhardt wrote: > >> There was an /incoming/Taggeg/by/PS2H/ directory with nothing in it >> >> >> Sol wrote: >> > >> > Hi, >> > >> > I've had this sort of thing happen myself. Both times it turned out to be pirates that basically "wardial" looking for anonymous ftp sites with decent badwidth to host their "warez". They'll use it until you discover them stealing the bandwidth and then move on. Whether or not you want to reinstall is determined by your paranoia and/or security policies. Did you discover what the files were? >> > >> > -- >> > Sol >> > >> > Somewhere around Tue, Oct 16, 2001 at 02:57:33PM -0600, Scott Gerhardt wrote: >> > > Thanks Tim, >> > > >> > > Wouldn't a complete reinstall be overkill when it only "appears" that >> > > someone put some mysterious files in an anonymous ftp incoming >> > > directory? >> > > >> > > It's not like someone cracked into the system, putting files in >> > > /var/ftp/pub/incoming is normal. Unless, the ftpd that comes with >> > > FreeBSD 4.4-Release has a gaping security hole I don't know about. >> > > >> > > The default ftpd that comes with FreeBSD chroot's anonymous users and >> > > has builtin commands so it should be quite secure, right? >> > > >> > > >> > > - Scott >> > > >> >> -- >> ------------------------------------ >> Scott Gerhardt, P.Geo. >> Gerhardt Information Technologies >> 306.227.5290 >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-questions" in the body of the message >> > >************************************ >* P. U. Kruppa - Wuppertal * >* Germany * >* www.pukruppa.de www.2000d.de * >************************************ > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message > > Best regards, Jack L. Stone, Server Admin Sage-American http://www.sage-american.com jacks@sage-american.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.5.32.20011017094052.01973238>