Opened at 2010-08-13T14:33:09Z

Last modified at 2010-09-06T19:26:00Z

#1175 closed enhancement

ftpd and sftpd documentation should advise to listen only on the loopback interface — at Version 1

Reported by: marked_doe Owned by: somebody
Priority: major Milestone: 1.8.0
Component: documentation Version: 1.8β
Keywords: security docs ftpd sftp easy reviewed Cc: marc.doudiet@…
Launchpad Bug:

Description (last modified by marked_doe)

By default in the documentation "docs/frontends/FTP-and-SFTP.txt" the example is as follow: 

 [sftpd]
 enabled = true
 port = 8022
 host_pubkey_file = private/ssh_host_rsa_key.pub
 host_privkey_file = private/ssh_host_rsa_key
 accounts.file = private/ftp.accounts

should be defined to listen on loopback interface only: 

 [sftpd]
 enabled = true
 port = tcp:8022:interface=127.0.0.1
 host_pubkey_file = private/ssh_host_rsa_key.pub
 host_privkey_file = private/ssh_host_rsa_key
 accounts.file = private/ftp.accounts

(same on ftpd)

Change History (2)

Changed at 2010-08-13T14:33:29Z by marked_doe

comment:1 Changed at 2010-08-13T14:35:50Z by marked_doe

  • Description modified (diff)
  • Keywords review-needed added
  • Summary changed from sftpd documentation doesn't advise to listen only on localhost to ftpd and sftpd documentation should advise to listen only on the loopback interface
Note: See TracTickets for help on using tickets.