PDA

Bekijk de volledige versie : anonymous vsftp access



Magnus
28-08-2007, 17:29
Hi out there,
I've a problem with the vsftpd.

I start the vsftpd from my rc.local with the /opt/etc/vsftpd.conf.
I cannot login with the anonymous user. Named Users are working.
Unfortunately I don't know so much about the vsftpd. What is missing ??
Do I need another user or group ??
Should I create the anonymous user with the web interface ??


Here is my config. Please help.
===========================
anonymous_enable=YES
nopriv_user=root
local_enable=YES
write_enable=YES
local_umask=022
anon_upload_enable=YES
anon_mkdir_write_enablanon_other_write_enable=YES
anon_world_readable_only=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
syslog_enable=YES
listen=YES
secure_chroot_dir=/
chroot_local_user=YES
enable_iconv=YES
local_charset=UTF-8
remote_charset=CP950
max_clients=64
pasv_enable=YES
pasv_min_port=65000
pasv_max_port=65535
pasv_address=81.210.xxx.xxx
======================================

bye
Magnus

Magnus
29-08-2007, 07:24
I'm just playing around with the config.
The listing of 500 subdirectories in my ftp client has take more than a minute. Log says 834 bytes /sec.
There are other ftp servers available for our box. Has anyone good experiences with another one ??

so long
Magnus

tiwag
29-08-2007, 09:25
I've installed and tested the vsftpd 2.0.5-1 from optware ipkg
http://ipkg.nslu2-linux.org/feeds/optware/oleg/cross/stable
and it works fine and much faster than the vsftpd which came with
the asus firmware. it installs to /opt/sbin and can be used alternatively
to the asus version, which resides in /sbin

$ ipkg files vsftpd
Package vsftpd (2.0.5-1) is installed on root and has the following files:
/opt/sbin/vsftpd
/opt/etc/vsftpd.conf


the asus vsftpd seems to be heavily modified in order to use the
sharing configuration which is stored in the /shares/MYVOLUME1/__share*
files and not all standard vsftp configuration parameters seem to work.

the problem with vsftpd installed with ipkg is, that it uses the
user configuration from /etc/passwd file, if you use

chroot_local_user=YES

then the local user can access only his home directory structure,
if you don't chroot the local users, then they have access to the complete
root tree on the harddisk. this is a security issue.

i changed back to use the asus vsftpd because it is more secure to
give access only to the dedicated shares from /shares/MYVOLUME1/__share_list.txt

brgds

esbe
28-07-2008, 08:16
And is it possible to disable anonymous FTP login in asus' vsftpd? I'd like to disable it, but don't know how.

wwong
22-09-2008, 03:46
And is it possible to disable anonymous FTP login in asus' vsftpd? I'd like to disable it, but don't know how.

I got similar problem. I don't have issue that the ftp is anonymous.

However, it is wide open from the WAN side. Any idea how to fix it please.

Many thks in advance.

/ww