Opened at 2010-08-13T14:33:09Z

Closed at 2010-09-06T19:26:00Z

#1175 closed enhancement (fixed)

ftpd and sftpd documentation should advise to listen only on the loopback interface

Reported by: marked_doe Owned by: davidsarah
Priority: major Milestone: 1.8.0
Component: documentation Version: 1.8β
Keywords: security docs ftpd sftp easy reviewed Cc: marc.doudiet@…
Launchpad Bug:

Description (last modified by marked_doe)

By default in the documentation "docs/frontends/FTP-and-SFTP.txt" the example is as follow: 

 [sftpd]
 enabled = true
 port = 8022
 host_pubkey_file = private/ssh_host_rsa_key.pub
 host_privkey_file = private/ssh_host_rsa_key
 accounts.file = private/ftp.accounts

should be defined to listen on loopback interface only: 

 [sftpd]
 enabled = true
 port = tcp:8022:interface=127.0.0.1
 host_pubkey_file = private/ssh_host_rsa_key.pub
 host_privkey_file = private/ssh_host_rsa_key
 accounts.file = private/ftp.accounts

(same on ftpd)

Attachments (1)

ftpd+sftpd-docs.dpatch​ (2.6 KB) - added by marked_doe at 2010-08-13T14:33:29Z.

Download all attachments as: .zip

Change History (5)

Changed at 2010-08-13T14:33:29Z by marked_doe

comment:1 Changed at 2010-08-13T14:35:50Z by marked_doe

  • Description modified (diff)
  • Keywords review-needed added
  • Summary changed from sftpd documentation doesn't advise to listen only on localhost to ftpd and sftpd documentation should advise to listen only on the loopback interface

comment:2 Changed at 2010-08-13T18:17:20Z by davidsarah

  • Keywords easy added
  • Owner changed from somebody to davidsarah
  • Status changed from new to assigned

comment:3 Changed at 2010-09-04T13:11:42Z by francois

  • Keywords reviewed added; review-needed removed

This documentation looks sensible to me.

comment:4 Changed at 2010-09-06T19:26:00Z by warner

  • Resolution set to fixed
  • Status changed from assigned to closed

Landed, in 95c62dc238c9735a. Thanks!

Note: See TracTickets for help on using tickets.