Topic: Is it possible To close access to specific IP FTP

[mgb]

Is it possible To close access to specific IP FTP
 I have a hacking attempts through FTP
deny ip port ftp  *.*.*.*
hosts .deny

 Thank you

[chris burnat]

Is it possible To close access to specific IP FTP
 I have a hacking attempts through FTP
deny ip port ftp  *.*.*.*
hosts .deny

 Thank you

Trying to block a specific IP is a waste of time.  Do not use FTP, it is (very) unsafe.  Use SFTP instead.  Check the Forums, there should be many posts about this topic.  There are a few free clients to install on your PC, Filezilla is a good choice with versions for Linux and Windows.

[janet]

mgb

Please read the FAQ
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Firewall

[mgb]

is not work
 config setprop manta DenyHosts 1.2.3.4
signal-event remoteaccess-update

log*1000000
16:07:27 server proftpd[12378]: 10.72.8.1 (1.2.3.4[1.2.3.4]) - FTP session opened.
Apr 25 16:07:27 server proftpd[12378]: 10.72.8.1 (1.2.3.4[1.2.3.4]) - FTP session closed.
Apr 25 16:08:27 server proftpd[12398]: 10.72.8.1 (1.2.3.4[1.2.3.4])  - FTP session opened.
Apr 25 16:08:27 server proftpd[12398]: 10.72.8.1 (1.2.3.4[1.2.3.4])  - FTP session closed.

 

[janet]

mgb

is not work
 config setprop manta DenyHosts 1.2.3.4

I am sure the command you used will not work.
You must replace manta with the service you want to affect ie ftp
You replace 1.2.3.4 with the IP you are blocking ie 66.421.38.7
eg
config setprop ftp DenyHosts 66.421.38.7

[mgb]

config setprop ftp DenyHosts 1.2.3.4
signal-event remoteaccess-update

is work

[CharlieBrady]

Trying to block a specific IP is a waste of time.  Do not use FTP, it is (very) unsafe.

I agree on both counts. mgb says "is work" - but for how long?

[janet]

mgb

mgb says "is work" - but for how long?

Yes I agree too with Chris & Charlie, the fix is only temporary until the hackers try from another IP.
mgb, you will only be kept busy entering "blocking rules" over and over as different IP's are used.
You are far better to implement & use ONLY secure protocols ie sftp, Public Private keys for ssh and so on, that provide full security and do not need to be "looked after".

[calisun]

Try this contrib, works great for me:
http://wiki.contribs.org/Denyhosts

[chris burnat]

Try this contrib, works great for me:
http://wiki.contribs.org/Denyhosts

This contrib deals with SSH logon attempt, not FTP.
Nothing to do with topic.

[calisun]

If you disable ftp and only allow sftp, will this plugin not catch catch fake sftp attempts?