3

What line in which configuration files in the /etc/ftpd directory do I have to check to ensure that anonymous FTP has been disabled?

From my understanding now, to ensure that anonymous FTP is disabled, all the users assigned to the anonusers group in /etc/ftpd/ftpaccess has to be added to /etc/ftpd/ftpusers to deny them access.

Is there a simpler way?

3

Adding guestserver to the ftpaccess file should disable anonymous FTP:

# echo "guestserver" >> /etc/ftpd/ftpaccess

Test it out by ftping to localhost and use anonymous as the user login; you should see it fail.:

530 Guest login not allowed on this machine.
Connection closed by remote host.

  • From an audit POV, what is the best way to test that anonymous access has been denied? – Ayrx Nov 4 '12 at 4:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.