Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 May 2004 09:40:43 +0200
From:      Pavel Duda <element@email.cz>
To:        freebsd-questions@freebsd.org
Subject:   Re: How to secure ftp over SSH (how to make ftpd listen only to  127.0.0.1)?
Message-ID:  <c8kbob$s1$1@sea.gmane.org>
In-Reply-To: <40AD93CA.2010308@rbcmail.ru>
References:  <40AD93CA.2010308@rbcmail.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Constantine wrote:

> Hello,
> 
> I am very concerned about the security of my servers. My favourite 
> file-management software does not support any other unix standards than 
> plain ftp.
> 
> How is it possible to set up my FreeBSD 5.2.1 that way, that it will 
> accept ftp connections only from itself, so that iff the login to the 
> system is done via SSH with port-forwarding, then one can open 
> ftp-connection?
> 
> (It will be very nice if in this case the username/password is not 
> requested again, i.e. the ftp connection is anonymous and yet the 
> ftp-client gets the same rights to files as SSH-logged user, who has the 
> port-forwarding, but this does not sound like easy doable.)
> 
> Put it in other words, how can I make ftpd listen only to 127.0.0.1?
> 
> Constantine.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"
> 

I'm not sure if this is possible to set within ftpd. I'm using classic 
way to block incoming FTP requests from unwanted addresses - IPFW.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?c8kbob$s1$1>