Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Sep 2001 08:25:34 -0500
From:      Lucas Bergman <lucas@slb.to>
To:        Peter Brezny <pbrezny@purplecat.net>
Cc:        questions@freebsd.org
Subject:   Re: limiting ftp access by ip for an old 2.2.8 system
Message-ID:  <20010904082534.B48947@comp04.prc.uic.edu>
In-Reply-To: <NCBBILLCPGBGKGJLJKHHGEDMCBAA.pbrezny@purplecat.net>; from pbrezny@purplecat.net on Tue, Sep 04, 2001 at 09:03:48AM -0400
References:  <NCBBILLCPGBGKGJLJKHHGEDMCBAA.pbrezny@purplecat.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> I've got an old 2.2.8 system with someone making multiple attempts
> to gain access through ftp.
> 
> There's no hosts.allow in the /etc dir.  Is there a way I can deny
> all connections from this specific ip?

You could (a) install tcp_wrappers, (b) run ftpd through ucspi-tcp
instead of inetd, since it comes with a tcp_wrappers-like facility, or
(c) tell your firewall to drop packets from that IP bound for port 21
on the floor.

Note that conventional wisdom says that you should setup non-secure
services like telnetd and ftpd by inclusion, rather than exclusion.

Lucas

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010904082534.B48947>