LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-09-2010, 09:25 AM   #1
vkmahajan123
LQ Newbie
 
Registered: Jul 2010
Posts: 10

Rep: Reputation: 0
Lightbulb About FTP user security


heya every1,

wishes !!


well i am working as an administrator in Zee network... i made a FTP their also some users....now i face 1 problem....i need some security..like....i had one user account name ab...i want that ab (user) can upload only .xls files in his account because of some protection reasons....AND all other data or files had been restricted....bt i didn't know how is that possible that 1 user have secure with this kinda.....pls help me out guyzzz !!!

thanx in advance
VISHAL
 
Old 08-09-2010, 10:53 AM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 18,323

Rep: Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881
Quote:
Originally Posted by vkmahajan123 View Post
heya every1,
wishes !!

well i am working as an administrator in Zee network... i made a FTP their also some users....now i face 1 problem....i need some security..like....i had one user account name ab...i want that ab (user) can upload only .xls files in his account because of some protection reasons....AND all other data or files had been restricted....bt i didn't know how is that possible that 1 user have secure with this kinda.....pls help me out guyzzz !!!
thanx in advance
VISHAL
Spell out your words, and write clearly, please. Text-abbreviations are against LQ rules, and no capital letters makes your posts hard to read.

You provide no details here; things like what version/distro of Linux, what FTP server you're using, etc. And your question reads as if you've already done this, but don't know HOW you did it for one user..is that right? You can easily restrict users to their own home directories, but I know of no FTP server that (by default), has file-type filtering. You can limit for size, and which USER(s) can upload, but not by file type. There are ways to do it, but none that use options native to FTP servers, as far as I know.
 
1 members found this post helpful.
Old 08-09-2010, 10:59 AM   #3
CincinnatiKid
Member
 
Registered: Jul 2010
Posts: 450

Rep: Reputation: 47
The type restriction would be kind of hard, even if for instance you had a restriction so only files named *.xls could be uploaded. What happens when someone renames virus.rpm to ledger.xls and uploads it?
 
1 members found this post helpful.
Old 08-09-2010, 11:23 AM   #4
vkmahajan123
LQ Newbie
 
Registered: Jul 2010
Posts: 10

Original Poster
Rep: Reputation: 0
hi TB0ne,

thanx alot for your words. i always keep your words in my mind for future communication. i am using redhat linux & made vsftpd on it. also i made some users on ftp. my boss told me for restriction policy on files *.xls based as i want that the ftp user only uploaded *.xls kind files and restricted everything else. just bit confused....so pls help me now....
 
Old 08-09-2010, 11:38 AM   #5
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 18,323

Rep: Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881
Quote:
Originally Posted by vkmahajan123 View Post
hi TB0ne,

thanx alot for your words. i always keep your words in my mind for future communication. i am using redhat linux & made vsftpd on it. also i made some users on ftp. my boss told me for restriction policy on files *.xls based as i want that the ftp user only uploaded *.xls kind files and restricted everything else. just bit confused....so pls help me now....
Yes, I can tell you'll keep those things in mind when you post...especially since you STILL don't use capital letters, and are still text-speaking. It's "please", not "pls", "thanks", not "thanx".

What VERSION of RedHat Linux..there have been lots. And as I said in my first post, and lewisforlife touched on, there's no way for a default FTP server to do this, period. As I said, you CAN restrict sizes, uploads (in general), and directory permissions, but NOT file types.

If you want to, you can write some PHP code, and make all FTP access go over HTTP, via web browser. That way, the PHP pages could validate the file type, and allow/deny uploads based on it.
 
Old 08-09-2010, 12:09 PM   #6
schneidz
LQ Guru
 
Registered: May 2005
Location: boston, usa
Distribution: fc-15/ fc-20-live-usb/ aix
Posts: 5,051

Rep: Reputation: 852Reputation: 852Reputation: 852Reputation: 852Reputation: 852Reputation: 852Reputation: 852
Quote:
Originally Posted by TB0ne View Post
Yes, I can tell you'll keep those things in mind when you post...especially since you STILL don't use capital letters, and are still text-speaking. It's "please", not "pls", "thanks", not "thanx".
i understand his second post much better than his first.
____________________

since ftp is antiquated, if possible could you use scp ?
also, file can help you figure out what files are true ms-excel spreadsheets:
Code:
[schneidz@hyper ~]$ file ./stuff/bills/2008_Principle_Sites.xls
./stuff/bills/2008_Principle_Sites.xls: CDF V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1252, Author: cmccombs, Last Saved By: cmccombs, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Apr 18 20:25:12 2006, Last Saved Time/Date: Tue May 30 13:49:02 2006, Security: 0
maybe you can create some script that goes thru that directory and delete non ms-excel files every few minutes or something.

Last edited by schneidz; 08-09-2010 at 12:20 PM. Reason: changed 2nd to second and 1st to first.
 
Old 08-09-2010, 10:47 PM   #7
vkmahajan123
LQ Newbie
 
Registered: Jul 2010
Posts: 10

Original Poster
Rep: Reputation: 0
TB0ne and schneidz,

Thanks Alot for your Solution's. Now i got your Point. Well will you help me out in one thing Because i am very much new to Linux & 6 Months Ago I Cleared out RHCE Certification. But After that i was not so much touched with LINUX. Now a days i have just forgotten so many things. I want job in Linux But for that i Need to learn so many things in that. You both are My Seniors in this line. I know you Guided me Well. Please help me for learning as What...From where...How....? & Also one thing more...I want to Preparation Some kind of Database for Job in Future...Which is Best for me....I am Asking from So many Persons. Every time they Just Confused me in SQL, POST SQL, MY SQL, ORACLE.....????? Is Database Study is good for me or Something Else. Please Please Guide me. I Choose Linux as my Career But No one Guide Me....I Love Linux But Is their Anybody Who Guided me ????
 
Old 08-10-2010, 03:37 PM   #8
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 18,323

Rep: Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881Reputation: 3881
Quote:
Originally Posted by vkmahajan123 View Post
TB0ne and schneidz,

Thanks Alot for your Solution's. Now i got your Point. Well will you help me out in one thing Because i am very much new to Linux & 6 Months Ago I Cleared out RHCE Certification. But After that i was not so much touched with LINUX. Now a days i have just forgotten so many things. I want job in Linux But for that i Need to learn so many things in that. You both are My Seniors in this line. I know you Guided me Well. Please help me for learning as What...From where...How....? & Also one thing more...I want to Preparation Some kind of Database for Job in Future...Which is Best for me....I am Asking from So many Persons. Every time they Just Confused me in SQL, POST SQL, MY SQL, ORACLE.....????? Is Database Study is good for me or Something Else. Please Please Guide me. I Choose Linux as my Career But No one Guide Me....I Love Linux But Is their Anybody Who Guided me ????
Well again, your posts are very hard to read and understand, and this 'question' doesn't really relate to your original post.

What do you expect people to 'guide you' with?? If you've got your RHCE, then you should have a good understanding of what's going on, even if your skills are a bit old. Load a Linux box up, and practice. Ask SPECIFIC questions...saying "I need to learn alot! Guide me!" is pointless. If you want to prepare for a DBA job, then learn the database you want to administer. MySQL is different fro Oracle, which is different from PostgreSQL, etc., and all have different requirements. Pick one, learn it.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] vsftpd: FTP clients work, ftp://xxxx in mozilla does not. Anonymous user prob? arashi256 Linux - Server 8 01-13-2010 10:31 AM
Anonymous FTP for all, user FTP logins only for specific IP ranges Sjorrit Slackware 15 04-24-2009 03:32 PM
samba(global security=user) useful tools for client.ex: user change password. hocheetiong Linux - Newbie 1 03-18-2008 10:20 AM
FTP Security on viewing user directories joshnya Linux - Security 3 02-23-2003 11:34 AM


All times are GMT -5. The time now is 10:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration