Linux FTP Server

a.ankursarkar · 01-15-2015, 06:59 AM

Is it possible that we restrict User on a perticular IP Addess in FTP or another Server. Ex. FTP User A able to login on it’s allow IP A.A.A.A, And FTP User B able to login on it’s allow IP B.B.B.B. User A not able to login from User B allow IP B.B.B.B.

TB0ne · 01-15-2015, 09:07 AM

Quote:

Originally Posted by a.ankursarkar

Is it possible that we restrict User on a perticular IP Addess in FTP or another Server. Ex. FTP User A able to login on it’s allow IP A.A.A.A, And FTP User B able to login on it’s allow IP B.B.B.B. User A not able to login from User B allow IP B.B.B.B.

Yes, it is, depending on which FTP server you're using. You don't tell us what version/distro of Linux or what FTP server you're talking about, but this is covered in both the ProFTP and VSFTP manuals.

schneidz · 01-15-2015, 09:12 AM

i think sftp with keys is what you are after.

TB0ne · 01-15-2015, 09:16 AM

Quote:

Originally Posted by schneidz

i think sftp with keys is what you are after.

I agree about using SFTP rather than FTP...but ProFTPD can set access restrictions based on address/user combinations.

Miati · 01-15-2015, 09:17 AM

sftp is the way to go.

It's fairly easy to restrict users to ip addresses, key or not.

In the sshd_config at the bottom you can write who is permitted to access from where.
If you want to define by user & restrict bob to 132.647.546.2 & alice to 435.765.245

Code:

AllowUsers bob@132.647.546.2 alice@435.765.245

Or if you have a group ftp connecting from anywhere in 345.643.3

Code:

AllowGroups ftp@345.643.3*

More ssh config with matching / allow

edit:

This deals with ssh, not ftp - sorry if that wasn't clear

a.ankursarkar · 01-16-2015, 01:23 AM

Thanks to all for your reply.

@TB0ne :- OS - centos6.3
FTP Server - vsftpd

And I also AllowUsers username@IP in my sshd_conf file. But it's not helpful foe m.

TB0ne · 01-16-2015, 09:58 AM

Quote:

Originally Posted by a.ankursarkar

Thanks to all for your reply.

@TB0ne :- OS - centos6.3
FTP Server - vsftpd

Great...so did you check/read the documentation on vsftpd yet? Pay particular attention to the tcp_wrappers directive. Also, again, proftpd has such things built in as well.
https://security.appspot.com/vsftpd/vsftpd_conf.html

Quote:

And I also AllowUsers username@IP in my sshd_conf file. But it's not helpful foe m.

Changing ANYTHING for your SSH configuration won't change anything for FTP...they're two different services. The AllowUsers directive for SSH is for SFTP.

zafar_dandoti · 01-17-2015, 07:21 AM

Enable tcp_wrappers in vsftpd.conf file
Edit /etc/host.allow
Vsftpd: xxx.xxx.xxx.xxx
xxx.xxx.xxx.xxx

And in host.deny

Vstpd : ALL