From owner-freebsd-security  Mon Nov 22 11:38:55 1999
Delivered-To: freebsd-security@freebsd.org
Received: from shell.monmouth.com (shell.monmouth.com [205.231.236.9])
	by hub.freebsd.org (Postfix) with ESMTP id 11F2014D90
	for <security@freebsd.org>; Mon, 22 Nov 1999 11:38:52 -0800 (PST)
	(envelope-from pechter@pechter.dyndns.org)
Received: from pechter.dyndns.org (bg-tc-ppp90.monmouth.com [209.191.60.91])
	by shell.monmouth.com (8.9.3/8.9.3) with ESMTP id OAA19582;
	Mon, 22 Nov 1999 14:36:28 -0500 (EST)
Received: (from pechter@localhost)
	by pechter.dyndns.org (8.9.3/8.9.3) id OAA05868;
	Mon, 22 Nov 1999 14:37:56 -0500 (EST)
	(envelope-from pechter)
From: Bill Pechter <pechter@pechter.dyndns.org>
Message-Id: <199911221937.OAA05868@pechter.dyndns.org>
Subject: Re: Disabling FTP (was Re: Why not sandbox BIND?)
In-Reply-To: <38391B04.9F5FD39D@vangelderen.org> from "Jeroen C. van Gelderen" at "Nov 22, 1999 11:29:24 am"
To: jeroen@vangelderen.org (Jeroen C. van Gelderen),
	security@freebsd.org
Date: Mon, 22 Nov 1999 14:37:30 -0500 (EST)
Reply-To: bpechter@shell.monmouth.com
X-Phone-Number: 908-389-3592
X-OS-Type: FreeBSD 4.0-CURRENT
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> People expect UNIX to be secure, so this argument doesn't really
> hold, does it?
> 
> Hmm, makes me think: does Solaris ship with ftpd enabled by default?
> 
> Cheers,
> Jeroen
> -- 
> Jeroen C. van Gelderen - jeroen@vangelderen.org
> Interesting read: http://www.vcnet.com/bms/ JLF
> 


Solaris not only ships with ftpd enabled, it alllows ftp connections 
from root (no ftpusers) by default.  (Found this out on my install
of Solaris 7 Server 8/99 last week).  8-)


Bill
---
  bpechter@shell.monmouth.com|pechter@pechter.dyndns.org
      Three things never anger: First, the one who runs your DEC,
      The one who does Field Service and the one who signs your check.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message