LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices


Reply
  Search this Thread
Old 12-10-2008, 04:16 AM   #1
anindyabhattacharjee
LQ Newbie
 
Registered: Oct 2006
Posts: 14

Rep: Reputation: 0
Blocking exe upload at vsftpd server


Dear all,

I am running one vsftpd server successfully on RHEL 4 update 6. Now I want
to block .exe upload in vsftpd server. I am not finding any configuration parameter on vsftpd server for blocking extension wise. I am not running any proxy between client end and vsftpd server. Is their any other way of blocking extension based upload.

Any scripting can help in this regard ?


Thanks in advance.......

Regards
anindya bhattacharjee
 
Old 12-10-2008, 04:38 AM   #2
colucix
LQ Guru
 
Registered: Sep 2003
Location: Bologna
Distribution: CentOS 6.5 OpenSuSE 12.3
Posts: 10,509

Rep: Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983Reputation: 1983
There is an option to the configuration file which resembles what you're looking for, but it is not clear if it works for the files being uploaded. From man vsftpd.conf:
Code:
deny_file
    This option can be used to set a pattern for filenames (and directory
names etc.) which should not be accessible in any way. The affected items
are not hidden, but any attempt to do anything to them  (download, change
into directory,  affect something within directory etc.)  will be denied.
This option  is very  simple,  and should not be used  for serious access
control - the filesystem's permissions should be used in preference.
However, this option  may be useful  in certain virtual  user setups.  In
particular aware that  if a filename is accessible  by a variety of names
(perhaps due to symbolic links or hard links), then care must be taken to
deny access  to all  the names.  Access will be denied  to items if their
name contains the string given by hide_file, or if they match the regular
expression specified by hide_file.  Note that vsftpd's regular expression
matching  code is a  simple  implementation  which  is a  subset  of full
regular  expression  functionality.  Because  of this,  you will  need to
carefully and exhaustively test  any application of this option.  And you
are recommended to use filesystem permissions  for any important security
policies due to their greater reliability.
Example: deny_file={*.mp3,*.mov,.private}

    Default: (none)
You can give it a try, anyway.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
vsftpd upload problem in RH nkd Linux - Newbie 2 10-05-2007 10:06 PM
vsftpd very slow upload backroger Linux - Enterprise 0 09-18-2006 07:30 PM
on upload command with vsftpd DRagonRage Linux - Networking 6 10-08-2005 01:15 PM
VSFTPD - can download but cant upload. Dirt Linux - Software 1 09-06-2003 08:42 PM
Blocking file ext (exe, vbs, bat, com..) with sendmail PcHammer Linux - Software 2 08-29-2002 06:44 AM

LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise

All times are GMT -5. The time now is 07:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration