Hi,

I have a Linux dedicated server, and I would like to setup ftp for users so that they don't have read access to the directory tree above their own user root directory. Can anybody tell me how to do this? Is this possible to specify from webmin? Or do I need to this via ssh/telnet?

Thanks in advance for the help.

I know ncftpd(ncftp.com) does this. There is no webmin interface for it, but it is farily easy to setup.

Try ProFTPD also ... http://www.proftpd.org

I have WUFTP installed. As far as I know, what I'm trying to do isn't dependent on the type of ftp, rather it's a setup option, or perhaps a permission setting for a directory.

Thanks.

check out the ftp server module for webmin at http://www.fh-furtwangen.de/~grund/webmin-wftp.html

no, I think it is dependant of the ftp. In ncftpd, you set the option in the config file and it roots em.

Originally posted by davidb
no, I think it is dependant of the ftp. In ncftpd, you set the option in the config file and it roots em. Hmm, interesting. I took at look at the setup for the ftp server in webmin. Under "limits and access control" there is an option "deny access to files". The docs say "If a file to deny ends with a /, the FTP server will deny access to all files in that directory." I tried doing this for the directory above the user directory, but it didn't work. Oh well. I'll keep playing with it.

Thanks

I hate it when I'm stupid. Although in this case it wasn't so much a case of stupidity, rather a case of ignorance... well, maybe a little stupidity :)

After doing some research, I discovered that what I really wanted was to define the ftp login for my users as a "guest login". Once I discovered this, I went into the "ftp server" section of webmin and made the necessary changes...

- enabled guest ftp login by clicking on the guest checkbox
- added the list of names that I wanted to be "guests"
- added these same names to the "do not deny list"

I'm not sure if I really need the last step (do not deny) or not. I'm not even sure what the "do not deny list" is for. But in any case, it now works. Now when a user logs in, they don't get to see EVERYTHING down to my briefs.

I hope that the above helps someone.

Originally posted by mrjaytee
Try ProFTPD also ... http://www.proftpd.org

I like ProFTPd over Wu-FTPd anyway. It has lots of other neet options that are useful to hosting companies. (Not to mention Wu-FTPd's bad security track record.)