How to block an anonymous ftp user?


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers How to block an anonymous ftp user?
# 1  
Old 04-10-2008
How to block an anonymous ftp user?

Could anyone provide information on how to block a specific client machine from being able to log onto anonymous ftp?
# 2  
Old 04-10-2008
Hey,

which FTP-Server do you use?
Every FTP-Server has a config file, here you can filter every user.

CU
lowbyte
# 3  
Old 04-10-2008
Or if it's a particular IP address, drop it in hosts.deny
# 4  
Old 04-10-2008
Thanks for your quick replies

We are using Redhat Linux.
# 5  
Old 04-10-2008
Another thing

When I use the "last command" the attacking server's ID shows as "can59-4-82-240-1". Can this be used as the IP address in the hosts.deny file.
For example would this work?
ALL : can59-4-82-240-1
# 6  
Old 04-10-2008
That looks truncated. Do you know the full domain name for that?

Many ISPs have a convention to put the IP address in the host name for dynamic (dial-up or home ADSL) users. By that convention, it would look like the IP address for this host would be 59.4.82.240, or possibly 4.82.240.1 (or maybe even 1.240.82.4 or 240.82.4.59; but those are not valid / allocated anyway).

Sometimes the reverse DNS is missing, and in that case, using the host name won't work. The DNS lookup will take time anyway, so using the bare IP address is probably more efficient.

If this is a dynamic user, they could come up at a different IP address the next time they reconnect to their ISP.

Have you tried contacting the attacker's ISP, by the by?

whois -h whois.arin.net 59.4.82.240 suggests this is in Korea, but if that's the wrong IP address, that's of course just a red herring. 4.82.240.1 belongs to Level 3 / Genuity.
# 7  
Old 04-11-2008
Hi there again.
Well I looked into this and found that the IP address of the attacking client is 82.240.116.2398 which is in France, and also got the mail address of the provider. I sent them a mail but no reply yet.

I opened the hosts.deny file and edited it using vi. When I save it using :w! to override the readonly setting, I get a message saying cannot open file for writing. Do I need to edit as super user?
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Call Anonymous block from DB2

Hi, I have a shell script and im trying to call a .sql file. The sql file has a simple Anonymous block. The code is shell script db2 -tvf query.sql the sql file contains SET SERVEROUTPUT ON; BEGIN call dbms_output.put_line( 'Hello' ); END; I get the following error BEGIN... (1 Reply)
Discussion started by: sup
1 Replies

2. Shell Programming and Scripting

Anonymous ftp log?

Hello, I was wanting to know if there is any log/tracker for anonymous ftp activity for users that are logging in to our server. We migrated over to a new server and cleaning up some loose ends on the old server. We noticed that some files are being loaded on the old server via anonymous ftp.... (1 Reply)
Discussion started by: shorty
1 Replies

3. Shell Programming and Scripting

Invoking SP through Anonymous Block

Hi, I'm writing a Shell script to run a stored procedure through SQL*Plus using the below script and it works well. Test.sh $ORACLE_HOME/bin/sqlplus connect user/pwd@dbname @Test.sql Test.sql call sp_test_procedure() Now, similarly I want to run the below PL/SQL anonymous block... (1 Reply)
Discussion started by: Dev_Dev
1 Replies

4. Shell Programming and Scripting

To get value from Oracle Anonymous PLSQL block

Hi All, i need you help while accessing the value from anonymous PL/SQL block. Initially our requirement was to get the value from SQL statement. I was doing like... But now i need to use dbms_application_info.set_module in it. So i have planned to use anonymous block instead of SQL... (2 Replies)
Discussion started by: Amit.Sagpariya
2 Replies

5. Cybersecurity

anonymous ftp attack?

For the last week or so every day for about 6 to 10 hours someone is logging in and out continuously to our anonymous ftp. They don't stay logged in. It seems like it must be an automatic process aimed at tying up our anonymous ftp. The ID of the server doing this is can59-4-82-240-1. As a result... (2 Replies)
Discussion started by: dennisheazle
2 Replies

6. UNIX for Advanced & Expert Users

Anonymous User

Hi, Can a anonymous user have password ? I have created a user and set password. Now I want to create that user as anonymous. Ronald (1 Reply)
Discussion started by: ronald_brayan
1 Replies

7. Solaris

Want to block ftp for root user

Hi Friends, I would like to block the root user for doing ftp. As I am aware that I need to put the entry for root in /etc/ftpusers.....am I right...??? But I am not able to edit the file & even more command is not working. #ls -l ftp* total 14 -rw-r--r-- 1 root sys 1249 Jun... (3 Replies)
Discussion started by: jumadhiya
3 Replies

8. IP Networking

Enable PWD command on anonymous FTP?

Hello everyone - First post here, I'm trying to connect to an anonymous ftp server and I am told by the server admin that I cannot have access to the "print working directory" command. I need to have access to this command in order for my (and my clients) preferred ftp client to connect. (the... (9 Replies)
Discussion started by: HiredGun79
9 Replies

9. UNIX for Dummies Questions & Answers

Disable anonymous ftp????

How do i disable anonymous ftp on a unix system?????? Please help!!!!!!!1 (2 Replies)
Discussion started by: rrivas
2 Replies

10. UNIX for Dummies Questions & Answers

Anonymous FTP Server

How do I set up and Anonymous FTP Server on Unix FreeBSD v4.3? Also, how do I set up my account to get root access when I am logged onto my server through ftp? Thanx in advanced. (6 Replies)
Discussion started by: ByondF1
6 Replies
Login or Register to Ask a Question

Featured Tech Videos