Allow/Deny Access to FTP ?

[mr.destroyer]

Can anyone make it possible in The FTP sektion to make the Ban IP to Allowed IPs instead...

if i want limited people to gain access to the FTP i want to lock so only the IPs i specify can gain access...

i know that the FTP is password protected but thats not to hard to hack :(

is it possible to make a function like the one there is in ex. Mac ID

like i can specify Ips and then choose if the Ips i specified should be Granted or Denied access....

this is the only function i miss in this router...

but even better is if i could Lock and specified FTP user to its IP..

for ex.

User: Me
Pass: test
IP: something...

then it would only be possible for Me to login at that Something IP..

[Styno]

If you did a search on the forum, you would have found the standard FTP server has limited options. Development of the FTP server seems to have stopped. So no luck on that side, which means, unless you plan on doing some hacking in the FTP source code yourself, you won't get lucky.

Another option is to find yourself another nice, simple and small FTP server (on SourceForge.net for example), compile it and run it from your USB device. The hard part is to find such a server, because many here have tried and, as far as I know, nobody has an alternative FTP server running.

If you do get lucky though, make sure you mention it here on the forum, so the helpful folks here can enjoy it as well. :D

[Styno]

I've been looking around a bit and found a few interesting links which contain lists of Linux enabled FTP servers:
http://www.daemons.kiev.ua/ftp/
and
http://www.linuxlinks.com/Software/System/Daemons/FTP/
and
http://mirrors.bieringer.de/www.deepspace6.net/docs/ar01s05.html

After visiting some devolopers websites. The following FTP servers look interesting to me:
- For installation on USB storage:
http://sourceforge.net/projects/pureftpd/
http://vsftpd.beasts.org/
http://www.wzdftpd.net/index.php
These three have all the fancy features one can imagine, with size as a drawback of course.

- For replacing the stupid-ftp server currently in the firmware:
http://betaftpd.sourceforge.net/
This server provides more functions compared to stupid-ftp (support for APPE, directory caching, shadow passwords).

Any of the other contributors want to comment on this? Antiloop/Oleg et. al.?

[Antiloop]

í'll have a look tonight.. burning here :S

oleg is at vacation for a little while

[Styno]

Because my girlfriend had to use my computer for het thesis, I was reading some in the 'Linux Network Administrators guide' and found some info which is useful for allowing specific hosts to your FTP server.

Here it goes:
If you use inetd to manage the stupid-ftp daemon, you can use the tcpd daemon to wrap the FTP server. This way you can control access to it on the basis of two control files (/etc/hosts.allow and /etc/hosts.deny).

All you need is:
-inetd daemon
-tcpd daemon
-be able to run stupid_ftp as a inet daemon (don't know if this is possible)

I know inetd isn't on the router by default but I found a post where RCR allready has it going:
[...]

But you can compile BusyBox to give you an inetd daemon.

[...]

I compiled them both with the Linksys toolchain, building them statically with uClibc.

[...]