[wplug] Anonymous FTP and hidden files (security problem?)

Russ Schneider russ at sugapablo.com
Wed Sep 10 09:43:22 EDT 2003


Jonathan S. Billings wrote:

> I just wanted to note that 'tftp' and 'ftp' are two completetely 
> different protocols, and that 'tftp' isn't also known as anonymous ftp.

Noted.

> I agree with the point though, you shouldn't be able to get shell access 
> through your ftp server, so there is no reason to have the standard 
> shell rc files and other files created by adduser.

That's what I was thinking, but I wanted to know what others thought. 
I'm NOT a security person.  I'm still learning.

I did remove those files and anonymous FTP still seems to be working fine.

-- 
Russ Schneider (a.k.a. Sugapablo)
http://www.sugapablo.com




More information about the wplug mailing list