Date: Tue, 29 Aug 2000 19:26:12 -0700 (PDT) From: Kris Kennaway <kris@FreeBSD.org> To: "Chris D. Faulhaber" <jedgar@fxp.org> Cc: freebsd-current@FreeBSD.org Subject: Re: Restricting ftpd commands (fwd) Message-ID: <Pine.BSF.4.21.0008291925370.11528-100000@freefall.freebsd.org> In-Reply-To: <Pine.BSF.4.21.0008290704290.93377-100000@earth.causticlabs.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 29 Aug 2000, Chris D. Faulhaber wrote:
> The following got no response on -security two weeks ago. Perhaps
> -current will have more opinions.
>
> ---------- Forwarded message ----------
>
> I have found quite a few commands that ftpd shouldn't necessarily be
> responding to if the user hasn't logged in. In total, the following
> commands are taught to not talk to strangers: TYPE, STRU, MODE, ALLO,
> ABOR, SITE IDLE, SYST, REST. Many of these were obtained from OpenBSD.
As long as it doesnt break things, I'm quite happy with this change in
principle.
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0008291925370.11528-100000>