Text 496, 133 rader
Skriven 2004-08-30 21:58:00 av Paul Rogers (1:105/360.0)
Ärende: ftp, again
==================
I've got two problems, and one head-scratcher.

1) When I connect ftp/ssh to my server it seems like it's taking
30sec-1min to get my initial response.  I suspect some broadcast
is timing out.  But both server and client are in hosts file, it
shouldn't have to do that.  Ideas?

2) I'm trying to get anonymous ftp upload configured.  I can get
on, even "cd incoming" (since I moved it to /home/ftp/pub/incoming)
but get a "553 permission denied on server (upload)" when I try to
send.  Here's ftpaccess (#PGR is my own chicken tracks):
#PGR was here
# This file controls the behavior of the wu-ftpd
# ftp server.
#
# If you're looking for a graphical frontend to
# editing it, try kwuftpd from the kdeadmin
# package.

# Don't allow system accounts to log in over ftp
deny-uid %-99 %65534-
deny-gid %-99 %65534-
allow-uid ftp
allow-gid ftp

# The ftpchroot group doesn't exist by default, this
# entry is just supplied as an example.
# To chroot a user, modify the line below or create
# the ftpchroot group and add the user to it.
#
# You will need to setup the required applications
# and libraries in the root directory (set using
# guest-root).
#
# Look at the anonftp package for the files you'll need.
#guestgroup ftpchroot

# User classes...
#class   all   real,guest,anonymous  
#PGR
class   all   guest,anonymous  
class   local real,guest,anonymous  192.168.1.*

# Set this to your email address
#email root@localhost
#PGR
email paul@penny.lan

# Allow 5 mistyped passwords
loginfails 5

# Notify the users of README files at login and when
# changing to a different directory
readme  README*    login
readme  README*    cwd=*

# Messages displayed to the user
message /welcome.msg            login
message .message                cwd=*

#PGR
greeting terse

# Allow on-the-fly compression and tarring
compress        yes             all
tar             yes             all

# Prevent anonymous users (and partially guest users)
# from executing dangerous commands
chmod  no  guest,anonymous
delete  no  anonymous
overwrite no  anonymous
rename  no  anonymous
#PGR
umask  no  guest,anonymous

# Turn on logging to /var/log/xferlog
#log transfers anonymous,guest,real inbound,outbound
#PGR
log transfers anonymous,guest inbound,outbound
log commands anonymous,guest
log security anonymous,guest,real

# If /etc/shutmsg exists, don't allow logins
# see ftpshut man page
shutdown /etc/shutmsg

# Ask users to use their email address as anonymous
# password
#passwd-check rfc822 warn
#PGR
passwd-check trivial warn
#passwd-check none warn

#PGR
anonymous-root /home/ftp/pub
#PGR- allow LAN user uploads to pub & take ownership
upload class=all   /home/ftp /incoming no
upload class=local /home/ftp /incoming yes root root 0776
#PGR- filter filenames
path-filter anonymous /path.msg ^[-A-Za-z0-9_\.]* ^\. ^-
(EOF)

A lot of what I've been reading had /home/ftp/incoming, but
maybe they didn't use the anonymous-root, which seemed to me
like a good restriction to keep anonymous confined--even if I
don't INTEND to open ftp through the firewall.  Do I need
/home/ftp/pub or /pub/incoming on the upload?  Why can't I
upload, and how do I fix it?

3) I'm using wu-ftpd & RHL7.2.  /home/ftp only had a welcome.msg.
/var/ftp seems to be where the daemon has /etc, /lib, /bin, and
even /pub.  I created /home/ftp/pub.  I think I understand the
runaway/fill-up danger of using /var/ftp/pub.  I have /var &
/home in different partitions.  I've been reading config
instructions which put the lib:bin:etc under /home/ftp.  What
has me scratching my head is trying to figure out the sense of
having things a bit of both ways.  Apparently I was supposed to
use /var/ftp/pub, but then what was /home/ftp for?  A rubber
room because anonymous ftp users have to have SOMETHING as a
home directory?  What was wrong with the /var/ftp/pub, owners
and permissions?  Can anyone explain why things are setup this
way?

Paul Rogers, paulgrogers@yahoo.com                       -o)
http://www.angelfire.com/or/paulrogers                   /\\
Rogers' Second Law: Everything you do communicates.     _\_V

... No. Try not. Do, or Do not. There is no try.        Yoda
___ MultiMail/MS-DOS v0.35

---
 * Origin: The Bare Bones BBS (1:105/360)