From owner-freebsd-isp Wed Feb 21 1:18:51 2001 Delivered-To: freebsd-isp@freebsd.org Received: from sai.co.za (mail.sai.co.za [196.33.40.37]) by hub.freebsd.org (Postfix) with ESMTP id 1354B37B401 for ; Wed, 21 Feb 2001 01:18:44 -0800 (PST) (envelope-from davew@sai.co.za) Received: from dave ([196.33.40.17]) by mail.sai.co.za (SBMail MTA v2.11(1142) SMTPD32) with ESMTP id AA9376; for ; Wed, 21 Feb 2001 10:51:58 0200 (South Africa Standard Time) From: "David Wilson" To: "FreeBSD Mailing List" Subject: Secure FTP server, as secure as possible ? Date: Wed, 21 Feb 2001 10:52:57 +0200 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_005B_01C09BF4.73984B60" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MS-TNEF-Correlator: X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_005B_01C09BF4.73984B60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Hi guys, howzit going ? A client wants us to configure a FreeBSD server as an FTP server only. The clients that will connect will have static IP addresses. I can use tcp wrappers, and ipfw to do firewalling and closing of all access except to tcp port 21 from static IP clients. What other security options can I look at to make this an extremely secure FTP server ? Thanks. Kindest regards David Wilson The S.A Internet ------=_NextPart_000_005B_01C09BF4.73984B60 Content-Type: application/ms-tnef; name="winmail.dat" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="winmail.dat" eJ8+IjkIAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAGAAAAElQTS5NaWNy b3NvZnQgTWFpbC5Ob3RlADEIAQ2ABAACAAAAAgACAAEGgAMADgAAANEHAgAVAAoANAAAAAMAMAEB A5AGAMwGAAAlAAAACwACAAEAAAALACMAAAAAAAMAJgAAAAAACwApAAAAAAADADYAAAAAAB4AcAAB AAAAKwAAAFNlY3VyZSBGVFAgc2VydmVyLCBhcyBzZWN1cmUgYXMgcG9zc2libGUgPwAAAgFxAAEA AAAWAAAAAcCb46+zXqdQ5L0YQP6Nt8Wj5GGnogAAAgEdDAEAAAAVAAAAU01UUDpEQVZFV0BTQUku Q08uWkEAAAAACwABDgAAAABAAAYOAHh8jeObwAECAQoOAQAAABgAAAAAAAAAanu/Tzw81BGViAAQ S1esF8KAAAALAB8OAQAAAAIBCRABAAAAVwIAAFMCAAA0AwAATFpGdcfAO3sDAAoAcmNwZzEyNRYy APgLYG4OEDAzM08B9wKkA+MCAGNoCsBz8GV0MCAHEwKDAFAQZthwcnEOUBDffQqACMj0IDsJYjUA UAnDFUEKMhgxNTMCgBQic3R5ymwHkGgJ4HR7B7AFsCMAwAJzczEgFyBhZJELgGcgMRPzXHYIkKR3 awuAZDQMYGMAUAMLAwu1IEhpIGd1CHlzLBhAb3d6aekFQGdvGJI/CqIKhAqAMEEgY2wIkAIwIHeV AHB0BCB1BCB0bx0wGQIgZmkbIAlwIGEgQkYJ0UJTRCARIHIedgSQHwAEIAORRlRQox+mAiBseS4c ZFQXIH8dNR4hEPAdkQMQAyAecW6/BZAi1RDwH+AfoAGQdA3g7CBJIKAYcGQJcAQQB5C9IXVJHTAD kR4QHvB0DfDhHaByYXBwBJAbUQBwtGQgBSBmB+AeQWQeUH8eoAlwHbAjEBiSJ4IdQG9zAJAYoW9m HwAjEQDQY/ElQSBleCqABTEeQSai8nAJESAyGDADUiRZIiV1IXVXIrJvIqAf8REgY+8IcRbQISAF MGkCIAQgJiJzJgAJAG9rHwArIwDAa90mgWgEACBCKtB0CXAHgH8hUC6kHvAgiRxVIeAAcGuXJYY0 TgswbhuQaWQjkOZsCrER8SBLGZEHkAVA3QlwZwsRELAcc0QkIDXw9CBXAxBzAiA1CjDwKwBfC5A1 yhggCNAAQXUJUGLSICHiUy4dIEkCMASR/xEwNQ82FTrQAUA7EDXAI3C/CiABQDx5ATEccxQRAEAw AAsAAYAIIAYAAAAAAMAAAAAAAABGAAAAAAOFAAAAAAAAAwADgAggBgAAAAAAwAAAAAAAAEYAAAAA EIUAAAAAAAADAAeACCAGAAAAAADAAAAAAAAARgAAAABShQAAJ2oBAB4ACYAIIAYAAAAAAMAAAAAA AABGAAAAAFSFAAABAAAABAAAADkuMAAeAAqACCAGAAAAAADAAAAAAAAARgAAAAA2hQAAAQAAAAEA AAAAAAAAHgALgAggBgAAAAAAwAAAAAAAAEYAAAAAN4UAAAEAAAABAAAAAAAAAB4ADIAIIAYAAAAA AMAAAAAAAABGAAAAADiFAAABAAAAAQAAAAAAAAALAA2ACCAGAAAAAADAAAAAAAAARgAAAACChQAA AQAAAAMAHYAIIAYAAAAAAMAAAAAAAABGAAAAAAGFAAAAAAAACwBXgAggBgAAAAAAwAAAAAAAAEYA AAAADoUAAAAAAAADAFmACCAGAAAAAADAAAAAAAAARgAAAAARhQAAAAAAAAMAWoAIIAYAAAAAAMAA AAAAAABGAAAAABiFAAAAAAAACwCVgAggBgAAAAAAwAAAAAAAAEYAAAAABoUAAAAAAAACAfgPAQAA ABAAAABqe79PPDzUEZWIABBLV6wXAgH6DwEAAAAQAAAAanu/Tzw81BGViAAQS1esFwIB+w8BAAAA lwAAAAAAAAA4obsQBeUQGqG7CAArKlbCAABQU1RQUlguRExMAAAAAAAAAABOSVRB+b+4AQCqADfZ bgAAAEM6XERvY3VtZW50cyBhbmQgU2V0dGluZ3NcZGF2ZXdcTG9jYWwgU2V0dGluZ3NcQXBwbGlj YXRpb24gRGF0YVxNaWNyb3NvZnRcT3V0bG9va1xvdXRsb29rLnBzdAAAAwD+DwUAAAADAA00/TcA AAIBfwABAAAALwAAADxORUJCSkZJSUdLR0xQRUJJSkFDTEdFT0REQkFBLmRhdmV3QHNhaS5jby56 YT4AAAMABhCySsKvAwAHEFIBAAADABAQAAAAAAMAERAAAAAAHgAIEAEAAABlAAAASElHVVlTLEhP V1pJVEdPSU5HP0FDTElFTlRXQU5UU1VTVE9DT05GSUdVUkVBRlJFRUJTRFNFUlZFUkFTQU5GVFBT RVJWRVJPTkxZVEhFQ0xJRU5UU1RIQVRXSUxMQ09OTkVDVAAAAAC3eA== ------=_NextPart_000_005B_01C09BF4.73984B60-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message