Re: ProFTPd and reverse DNS

From: Noah (sitzat_private)
Date: Fri Sep 07 2001 - 23:35:34 PDT

Next message: Alexey Sintsov: "Shopping Cart Version 1.23"

Previous message: jesus lovejones: "Insecure handling of notes in Slashcode"
In reply to: Michael S. Fischer: "Re: ProFTPd and reverse DNS"
Next in thread: The Flying Hamster: "Re: ProFTPd and reverse DNS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, 7 Sep 2001, Michael S. Fischer wrote:

> On Fri, Sep 07, 2001 at 03:38:27PM -0600, Matthew S . Hallacy wrote:
>
> > Recently while browsing through security logs I noticed that quite a
> > few of the hosts connecting to the machine did not resolve, I've
> > checked into it, and apparently ProFTPd does not check forward to
> > reverse DNS mappings, and only resolves the IP address connecting.

[snip]

> Another potentially useful workaround is to configure ProFTPd to run out
> of inetd, using TCP Wrappers to enforce paranoid DNS checks.  This way
> you can have your cake and eat it too.

Alternatively, one could use mod_wrap:

http://rad.geology.washington.edu/~tj/proftpd/

Cheers,

Noah

Next message: Alexey Sintsov: "Shopping Cart Version 1.23"
Previous message: jesus lovejones: "Insecure handling of notes in Slashcode"
In reply to: Michael S. Fischer: "Re: ProFTPd and reverse DNS"
Next in thread: The Flying Hamster: "Re: ProFTPd and reverse DNS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Sep 08 2001 - 00:50:12 PDT