Hello,

I need to know if there are ftp connections in my machine.

How can I find out that?any commands to use?

PS: i know how to find which users are on my machine now by using #who -r



regards

Not sure what OS you're using but if you have 'lsof' command available this will work:

lsof -i :<service port number>

i.e. for ftp
lsof -i :21

If you mean "Who can open an ftp from my machine" then the list is probably anyone who can get to the command line. Depending what access they have depends what they can transfer.

If you mean "Who can open an ftp to my machine" then it becomes a little easier. Consider all your user accounts. You can prevent them having ftp access to your server by adding entries in /etc/ftpusers Peversely this is a list of those who are not allowed access. We keep a list of those who are and runa scheduled job to get everyone from /etc/passwd not in the allowed list and write them to /etc/ftpusers



Additionally, the ftpd can help you with logging too. Depending on your operating system, there may well be a debug flag you can set in /etc/inetd.conf (and refresh inetd, see man inetd.conf) so that all traffic gets logged with syslog. You can set it up to show both connections going from your server and those coming in. You have to remember that files can be moved both ways, so you can set logging to record which files and their direction too.

This is all dependant on the version of OS you have, so I can't be specific as a first bash.




I hope that this helps, but please post again to let us all know how you get on and what you have set up so that others may learn.



Robin
Liverpool/Blackburn
UK