vsftpd + denying & allowing IP's

kurrupt · 10-13-2006, 06:36 PM

Hey guys, iam trying to filter out IP addresses for my ftp server. Iam using TCP Wrappers to do this.

in my /etc/hosts.deny i have:

Code:

#FILE: /etc/hosts.deny
vsftpd : 192.168.1.: spawn /bin/echo  `/bin/date` access denied >> /var/log/vsftpd.log : deny

this is just a test to block local access into the ftp. But it doesnt seem to work at all, it still allows everyone on the network.

i even tried:

Code:

#FILE: /etc/hosts.deny
vsftpd : ALL : spawn /bin/echo  `/bin/date` access denied >> /var/log/vsftpd.log : deny

with same results.

any tips guys?

Wim Sturkenboom · 10-17-2006, 04:34 AM

It sounds like your setup does not use the tcp_wrappers. There is an option in the vsftpd.conf file to enable it. By default it's off, so if you run it stand-alone (not started from inetd), it will not work.

If you start it through inetd, you probably have to make sure that it goes through tcpd. That's the way I use it on my Slack boxes and it works.

man vsftpd.conf
man tcpd
man hosts_access