Anonymous FTP server

Question

All.
I have an SLES OES2 SP3 Netware file server that responds to to a browser attemptingto access ftp://ftp.serverip
When it does, I see one period for the current directory, and two periods to navigate up one directory. If I c lick on either of the set of periods I am told that I'm not allowed (which is a good thing). What I'd like is for the server to not even bother to respond to the request for an anonymous connection. That would make the local security staff happy also.
In yast, SW MAnagement one the server I see that I have the lukemftp, Novell-migration-ftp, pure-ftpd, rubygem-net-sftp, wget, and yast2-tfpt-server installed.
I've looked at the running daemoms and can not determine which one might be an ftp service.
If I can locate the PID # I could kill it, then I would like to find out how it gets launched and stop that too. I do have to boot this thing once in a blue moon, and I'd like not to have to manually find and stop the FTP service each time.
Any thoughts or help will be appreciated.
thanks,
Loren

Answer 1

On Fri, 03 Dec 2010 20:36:04 +0000, lorencarter wrote:
> All.
>
> I have an SLES OES2 SP3 Netware file server that responds to to a
> browser attemptingto access ftp://ftp.serverip
>
> When it does, I see one period for the current directory, and two
> periods to navigate up one directory. If I c lick on either of the set
> of periods I am told that I'm not allowed (which is a good thing). What
> I'd like is for the server to not even bother to respond to the request
> for an anonymous connection. That would make the local security staff
> happy also.
>
> In yast, SW MAnagement one the server I see that I have the lukemftp,
> Novell-migration-ftp, pure-ftpd, rubygem-net-sftp, wget, and
> yast2-tfpt-server installed.
>
> I've looked at the running daemoms and can not determine which one might
> be an ftp service.
>
> If I can locate the PID # I could kill it, then I would like to find out
> how it gets launched and stop that too. I do have to boot this thing
> once in a blue moon, and I'd like not to have to manually find and stop
> the FTP service each time.
>
> Any thoughts or help will be appreciated.
>
> thanks,
> Loren
There are multiple options how the ftp server can be started.
pure-ftpd can be started by it's own runlevel script, or it can be
controlled by the xinetd daemon. In the second case the xinetd listens on
the ftp port and when a connection froms in, it will start a pure-ftpd
process and handle that connection over to it.
You can use netstat to determine the way the ftp server is controlled:
# netstat -tanpu | grep LISTEN | grep 23
There must be one entry listed for port 23 that shows at the end (after
the process id) the program that controls this port. Either it is
poreftpd or it is xinetd. In case it is pure-ftpd it uses that runlevel
script, if it is xinetd, that one controls the ftp port. If you want to
disable the whole ftp server within xinetd you can modify the file /etc/
xinetd.d/pure-ftpd and set disabled to yes and then reload xinetd
(rcxinetd reload). After that you shouldn't see any port 23 in the
netstat output.
Rainer