VSFTPD allows anonymous login regardless

Rashkae ubuntu at tigershaunt.com
Sat Sep 29 23:17:53 UTC 2007


Gabriel Dragffy wrote:
> Hi all
> 
> I have VSFTPD setup to allow only local user authentication, but it  
> still allows anonymous connections and displays the contents of /home/ 
> ftp, what am I doing wrong?
> 
> I've included pertinent information from my vsftpd.conf file. Many  
> thanks.
> 
> 
> listen=YES
> anonymous_enable=NO
> local_enable=YES
> write_enable=YES
> local_umask=022
> xferlog_enable=YES
> connect_from_port_20=YES
> nopriv_user=ftpsecure
> rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
> 

Have you tried ftp manually (with ftp console command) and logging in as 
anonymous?

I ask because I wonder if your ftp client is successfully logging in as 
user ftp when it tries an anonymous connection.. (Ftp client will send 
either 'anonymous' or 'ftp' as username when making anonymous connections.




More information about the ubuntu-users mailing list