miami_g
06-12-2002, 08:51 PM
i keep getting ftp flooding, same ip opens many sessions. if i catch them i null route the ip, but thats after the fact.
is this related to anon ftp?
is there a cure, like how do i kill anon ftp if thats the opening these maggots are using.
thankyou
el_g
allan
06-12-2002, 09:35 PM
which FTP daemon are you running? Anonymous FTP should always be killed if you are not using it to serve files, because it is a security risk.
If you think you are seeing a lot of Anonymous FTP connections, but are not sure, take a look at your FTP log files to see what is happening...alternatively install a program like LogSentry:
http://www.psionic.com/products/logsentry.html
That will give you a daily readout of unusual events.
The Prohacker
06-12-2002, 10:01 PM
If you think its anon FTP, then do a search on your server for .nfo files :D
Then look inside them and see what ya find...