OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chris Wilkes (cwilkesladro.com)
Date: Fri Oct 12 2001 - 00:41:31 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Thu, 11 Oct 2001, Kaos wrote:

    > Can anyone shed some light on how I can deny ip's with proftpd?

    It looks like from http://www.proftpd.org/docs/faq/proftpdfaq-5.html you
    can do something like this in a directory:
            <Limit LOGIN>
              Order deny,allow
              Deny from 10.1.1.
              Allow from all
            </Limit>
    So sort of like apache.

    Also you can start this by using http://cr.yp.to/ucspi-tcp.html which is
    an inetd replacement. With tcpserver you can tell it to listen on ports
    and then pass that connection off to another program. The daemon that
    listens is called tcpserver and you can tell it to ignore or allow certain
    ips.

    You can also use TCP Wrappers, the doc for that is at
    http://rad.geology.washington.edu/~tj/proftpd/ . With that you use files
    like /etc/hosts.allow, hosts.deny, etc.

    Chris