3 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Disallowing authe...
FromSent OnAttachments
Marcin 'Rambo' RoguskiJan 28, 2005 1:45 am 
Sam VarshavchikJan 28, 2005 3:44 am 
Jay LeeJan 28, 2005 9:40 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Disallowing authentication of usersActions...
From:Jay Lee (jl@pbu.edu)
Date:Jan 28, 2005 9:40:43 am
List:net.sourceforge.lists.courier-users

Sam Varshavchik said:

Marcin 'Rambo' Roguski writes:

My problem is as follows: Yesterday night I was alarmed by a large number of returns of spam, which apparently originated from my server (do.id.uw.edu.pl). As it turned out, the spammer used unprivileged passwordless accound 'anonymous' for FTP. The account has been disabled for now, however this- as expected- disabled anonymous FTP access. So my question is, can Courier be configured to disallow authentication of certain (mailny passwordless) users?

Only if you replace system password based authentication to another authentication module, such as userdb, ldap, or mysql.

Your other option would be to use an ftp daemon like proftpd (and vsftpd I believe) that does not require an anonymous account with no password set in /etc/passwd.

Jay

-- Jay Lee Network / Systems Administrator Information Technology Dept. Philadelphia Biblical University

--