Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : config FTP let user download only, no upload

[viettechorg]

Hello everyone,

I am setting up a file download server and using FTP.

But i only want user to download and not to upload( prevent possibility of uploading bad script or shell script )

So does anyone know how can i do it?
Does it have any risk of security using this method?


Currently i am using apache so user can download, but this method take too much resource and server often overload when too many people download.

Thank you

[Ks Jeppe]

Linux or windows server?

If it's a linux server, just set it up so that the anonymous FTP user only has read access and not write or execute access to the folder which holds your files... should be easy...?

[viettechorg]

Linux,

i meant for users ( with username and password)

So i am not sure how to do this?

[Jeremy]

what ftpd are you running?

you should be able to setup a vhost like and only allow downloading.

[viettechorg]

proftpd i believe

[Ks Jeppe]

http://www.linuxfromscratch.org/blfs...r/proftpd.html

scroll down to the config info, and you should find a download-only version of the config file, you should be able to set it up that way for the users as it is with the anonymous in that config..