From owner-freebsd-security Fri Feb 16 5:34:18 2001 Delivered-To: freebsd-security@freebsd.org Received: from macalpine.cornfed.com (sdsl-216-36-86-82.dsl.iad.megapath.net [216.36.86.82]) by hub.freebsd.org (Postfix) with ESMTP id 862C637B65D for ; Fri, 16 Feb 2001 05:34:15 -0800 (PST) Received: (from fwmiller@localhost) by macalpine.cornfed.com (8.9.2/8.9.2) id HAA22233; Fri, 16 Feb 2001 07:26:16 -0500 (EST) (envelope-from fwmiller) From: "Frank W. Miller" Message-Id: <200102161226.HAA22233@macalpine.cornfed.com> Subject: ftpd To: freebsd-security@freebsd.org Date: Fri, 16 Feb 2001 07:26:16 -0500 (EST) Cc: fwmiller@macalpine.cornfed.com (Frank W. Miller) X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thanks for all the replies! The replies I got can be summarized as: 1) Disallow access for anonymous users by either removing the ftp user from the password file or adding ftp to /etc/ftpusers 2) Change the write permissions on pub (which is the directory I want to protect) to disallow writes. The first solution does not solve my problem. I want to allow anonymous users to download from my machine but I dont want them to be able to upload files or create directories. The second solution doesnt work might work. I had my permission set as 755 on the pub directory and have changed them to 555. That seems to disallow creating directories and I can still copy files to the directory as root. Thanks again for the help! FM -- Frank W. Miller Cornfed Systems Inc www.cornfed.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message