Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 May 2004 11:54:31 +0200
From:      Pavel Duda <element@email.cz>
To:        freebsd-questions@freebsd.org
Subject:   Re: How to secure ftp over SSH (how to make ftpd listen only to  127.0.0.1)?
Message-ID:  <c8n7vd$qg3$1@sea.gmane.org>
In-Reply-To: <40AD93CA.2010308@rbcmail.ru>
References:  <40AD93CA.2010308@rbcmail.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Constantine wrote:

> Hello,
> 
> I am very concerned about the security of my servers. My favourite 
> file-management software does not support any other unix standards than 
> plain ftp.
> 
> How is it possible to set up my FreeBSD 5.2.1 that way, that it will 
> accept ftp connections only from itself, so that iff the login to the 
> system is done via SSH with port-forwarding, then one can open 
> ftp-connection?
> 
> (It will be very nice if in this case the username/password is not 
> requested again, i.e. the ftp connection is anonymous and yet the 
> ftp-client gets the same rights to files as SSH-logged user, who has the 
> port-forwarding, but this does not sound like easy doable.)
> 
> Put it in other words, how can I make ftpd listen only to 127.0.0.1?
> 
> Constantine.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"
> 

I've forgot about hosts.allow it should work as well if you dont want to 
use ipfw.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?c8n7vd$qg3$1>