Date: Mon, 30 Apr 2001 13:37:14 -0400 From: "SILVER, MICHAEL A" <MSILVER@scana.com> To: "'Zhihui Zhang'" <zzhang@cs.binghamton.edu>, "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG> Subject: RE: incoming FTP troubles Message-ID: <DBB3921EFE2AD211A81500A0C9B5FE7607175FC8@msg04.scana.com>
index | next in thread | raw e-mail
It looks like some pirates uploaded some material to your ftp site for distribution. Apparently, they don't have a way to send this large amount of data to others, so they dump it on any ftp site they can find so their buddies can pick it up. Just delete it, and prevent anonymous from writing new files. I use to have anonymouse write access, but I use to have to monitor it constantly. After the last major FTP bug was found, I removed the write access all together. I also have a simple script that emails me anytime anyone starts up the FTP server. Nice on low traffic sites. ...Michael... -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Zhihui Zhang Sent: Monday, April 30, 2001 1:29 PM To: freebsd-questions@FreeBSD.ORG Subject: incoming FTP troubles I created a anonymous FTP account but forgot to delete it during the weekend. Today I find the / is full and I check the files under /var/ftp: total 3 drwxrwxrwt 3 root operator 512 Apr 30 13:35 . drwxr-xr-x 7 14 operator 512 Apr 28 14:24 . TAGGED BY RROKDOKA dr-xr-xr-x 6 root operator 512 Apr 24 13:40 .. -rw-r--r-- 1 root operator 0 Apr 30 13:35 abc mercury# pwd; du /var/ftp 489 ./bin 4 ./etc 161 ./pub 1 ./incoming/. TAGGED BY RROKDOKA/1 1 ./incoming/. TAGGED BY RROKDOKA/2 1 ./incoming/. TAGGED BY RROKDOKA/3/1 1 ./incoming/. TAGGED BY RROKDOKA/3/2 1 ./incoming/. TAGGED BY RROKDOKA/3/3 1 ./incoming/. TAGGED BY RROKDOKA/3/4 16222 ./incoming/. TAGGED BY RROKDOKA/3/5/0426 - Matrik_X-part2.XXX.VCD-Cromix/CD1 16223 ./incoming/. TAGGED BY RROKDOKA/3/5/0426 - Matrik_X-part2.XXX.VCD-Cromix 16224 ./incoming/. TAGGED BY RROKDOKA/3/5 1 ./incoming/. TAGGED BY RROKDOKA/3/6 1 ./incoming/. TAGGED BY RROKDOKA/3/7 16231 ./incoming/. TAGGED BY RROKDOKA/3 1 ./incoming/. TAGGED BY RROKDOKA/4 1 ./incoming/. TAGGED BY RROKDOKA/5 16236 ./incoming/. TAGGED BY RROKDOKA 16238 ./incoming 16893 . What is exactly happening? How to get rid of this in the future? Thanks, -Zhihui To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the messagehelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?DBB3921EFE2AD211A81500A0C9B5FE7607175FC8>