VSFTPD allows anonymous login regardless
Rashkae
ubuntu at tigershaunt.com
Sat Sep 29 23:17:53 UTC 2007
Gabriel Dragffy wrote:
> Hi all
>
> I have VSFTPD setup to allow only local user authentication, but it
> still allows anonymous connections and displays the contents of /home/
> ftp, what am I doing wrong?
>
> I've included pertinent information from my vsftpd.conf file. Many
> thanks.
>
>
> listen=YES
> anonymous_enable=NO
> local_enable=YES
> write_enable=YES
> local_umask=022
> xferlog_enable=YES
> connect_from_port_20=YES
> nopriv_user=ftpsecure
> rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
>
Have you tried ftp manually (with ftp console command) and logging in as
anonymous?
I ask because I wonder if your ftp client is successfully logging in as
user ftp when it tries an anonymous connection.. (Ftp client will send
either 'anonymous' or 'ftp' as username when making anonymous connections.
More information about the ubuntu-users
mailing list