Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Nov 1996 21:35:04 +0200 (EET)
From:      mika ruohotie <bsdisp@shadows.aeon.net>
To:        richards@herald.net (Richard Stanford)
Cc:        jgreco@brasil.moneng.mei.com, freebsd-isp@freebsd.org
Subject:   Re: The best way to allow users to access a WWW directory
Message-ID:  <199611231935.VAA29347@shadows.aeon.net>
In-Reply-To: <32964B0F.3C88@herald.net> from Richard Stanford at "Nov 22, 96 04:53:35 pm"

next in thread | previous in thread | raw e-mail | index | archive | help

while we are on the subject, allow me to ask few questions i've been
thinking lately...

we're about to start isping in few weeks time.

now, the way i've thought to run the webserver is that the users who
want to make their pages themselves indeed go under http://www.soap.bar/~luser
and the pages we make for the customers go under http://www.soap.bar/customer
or just the http://www.customer.bar

now, those lusers need to update their pages, and i'm not about to
give out _any_ shell accounts. nada.

actually the machine will not even have any telnetd. i'm planning to use
other methods for connecting into it over the network...

anyway, so i have to let them ftp into the machine. BUT, there's few probs
i've realized i will still have... first, does anyone use this with any
success/problems?

now, how do i prevent the users from uploading pirated stuff there? i _will_
quota their space usage. i have no way, right?

and i'm not sure if i've figured out a way to make it that when a lusers
ftp's in the machine they are already in their home directory, but that
should not be nothing more than just trivia...

also, i believe it's another "trivial" thing to make, when the time comes,
that www.soap.bar/~luser to point another machine from the server's
configurations... (i'm using either apache or roxen, anyone have an opinion
which one is better?)

so, my question is, how vulnerable the machine is while it's still allowing
the ftp access from dualup side of the network? (no way i will allow
non local network ips ftp in)

or am i being overly paranoid?

i seem to forgotten any other questions i had about the subject...

oooooh yes. will i get into the troubles with file permissions with my
scheme? (running a script that sets them right every several minutes should
not eat too much cpu, right?)

and another thing, i am planning to let people have several email accounts
under their address (that being luser.soap.bar, static ip too), am i
digging myself into a any kind of hole with that setup?


mickey
--
        mika ruohotie              mika@aeon.net



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611231935.VAA29347>