similar to: BlockHosts with CenOS 4.4?

Just in case anyone is using Blockhosts (http://www.aczoom.com/blockhosts/) with their Linux servers and Asterisk here are the rules necessary to block invalid users: "asterisk-NoPeer": r'Registration from .* failed for \'{HOST_IP}\' - No matching peer found', "asterisk-NoAuth": r'Registration from .* failed for \'{HOST_IP}\' - Username/auth name

Situation: We are providing hosting services. I've grown tired of the various kiddie scripts/dictionary attacks on various services. The latest has been against vsftpd, on systems that I can't easily control vs. putting strict limits on ssh. We simply have too many users entering from too many networks many with dynamic IP addresses. Enter.... thinking about LIDS or Log Based

I have vsftp chrooted so that users can only come into their home directory. I have a few virtual hosts. I have the websites in the home directory of the intial user for each site. So the sites look like this. /home/user1/html /home/user2/html Using vsftp, I have set the default to chroot a user to their home directory. So user1 ftping in whill go right to his directory and not be able to go

I am moving from a server from running Red Hat 7.2 (with ProFTP) to Centos 3 (with vsFTP). There is a setting in ProFTP that lets me set the default ftp login directory for a specific user and I would like to do the same with vsFTP. The reason being is I have a 'webadmin' user that I use for uploading web content. I am thinking I could make the home directory of the webadmin /var/www in

Hi guys, Just a quick question, I've been slowly moving all my user services to mysql backend, I realise it's probably not as good a choice as LDAP, but you tend to stick with what you know. To that end I want to setup both Apache and VSFTP to use mysql db for virtual users. Basically I want to create virtual users that are locked into their own home dir and have apache use mysql to

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server's port 21 from anywhere ( Client initiates connection) - FTP server's port 21 to ports > 1024 (Server responds to client's control port) - FTP server's ports > 1024 from anywhere (Client initiates data connection to

I'm having an odd behavior with vsftp on all CentOS 4 servers... maybe 3 too, but I'm not on those much. I am transferring in port mode as I've never managed to get passive to work with a firewall running. Anyway, this is what happens. During normal transfers with few files.. it works perfectly. During the transfer of like a large website with hundreds of files in various

I've been struggling with my firewall and getting vsftp to work in passive mode. It seems that everything on this hosting server works just fine without the eth0 entry in my iptables except for vsftp in passive. Am I opening up too much by adding the eth0 line? -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server''s port 21 from anywhere (Client initiates connection) - FTP server''s port 21 to ports > 1024 (Server responds to client''s control port) - FTP server''s ports > 1024 from anywhere (Client initiates data

Seems the script kiddies are now hitting vsftp with dictionary attacks. I had three boxes showing around 12000 attempts from one IP yesterday. My thoughts are that there should be an upstream solution for this which is then supported by the upstream vendor. Yes, I know there are several 'other' solutions, but I'd really like to stay mainstream and use a supported method for

Hi, I have a vsftp server and two users for up and download. If user Alice uploads a file, the owner is set to Alice as expected "-rw-r--r-- alice ftpuploadgroup" Now Bob can login to the same folder and is able to rename the uploaded file. Bob can also rename an uploaded folder, but can't rename a file in that folder .... I'm confused, as I don't get why this is

HI, I am facing problem in connecting ftp from the windows client. CENTOS5U1 Running vsftp daemon. From linux client i am able to upload and download. When i do an ftp upload of any files or folders from windows command line i am getting below error . *vsftp 553 Could not create file* *NOTE: SELINUX IS DISABLED AND THERE IS NO FIREWALL RUNNING* See my user permission and ownership details

Centos 6, stock installation, no additional repos added. vsftp works fine in regular mode, going to ssl I got issues. I get as far as 'directory listing' and it dies. It times out and disconnects. file: /etc/sysconfig/iptables-config added: IPTABLES_MODULES="ip_conntrack_ftp" (without this line, ftp normally fails, afraid it may be causing issues with the ssl) iptables -A

Hi, I want to setup a ftp Server on CentOS 4.4. I will have to choose which ftp is IDLE among 3 ftp pkgs that are vsftp,wuftp or proftp? What do you recommend? -- Thank you Indunil Jayasooriya -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20070313/453527c8/attachment.html>

I am running vsftp pretty much 'out of the box', though I turned off IPv4 and have it listening on IPv6. I have stopped ip6tables, as the simple rule to enable port 21 is not allowing gftp to connect (pasv mode, I think). gftp to the IPv6 address, it connects and gets a directory listing. I am running gftp from my normal login userid, connecting to my normal login userid on the

Hi, I want to setup vsftp on centos 4.5. 2 types of ftp. they are active and pasive. What is the default type ftp type o CentOS ? Is is PASIVE ftp? in /etc/vsftpd/vsftpd.conf, I found below line. What should I do for below line? # Make sure PORT transfer connections originate from port 20 (ftp-data). connect_from_port_20=YES Should I COMMENT it out? I need a very secure ftp service. YOUR

I have a certain directory under /usr that I want to make available through vsftp to a specific user. The easiest way to do this, I believe, is to create a symlink from the user's home directory to this directory. The catch is I want/need them to be able to delete/upload files as well. Root is the group and user owner of the files. What is the "proper" way to give rights for this

Greetings - In my logwatch report this morning I noticed reference to an attempt to connect to rsync from an external IP address. It doesn't appear that the connection was successful based on correlating information between /var/log/secure and /var/log/messages. But I am looking for some suggestions for implementing more preventative measures, if necessary. The log information from

Hello guys, I would like to mount a sftp or a ftp with ssl (vsftp with ssl) on to a Windows machine as an X: drive. So far I found SftpDrive witch costs only $39 :) and I don't want it. Do any of you have a positive experience with something like this? I need it cause I will install a very important software on that drive, witch doesn't need to be on the local disk of the windows

I am in the process of setting up a new server. In the process I cannot remember what I need to set so that an FTP user cannot move upward in the directory tree of the user's directory. The FTP server is VSFTP. The user's directory is owned by the user and the permissions are 775. Isn't there a setting in httpd.conf to prevent that? Todd -- Ariste Software 2200 D Street Ext