Admin: 1 revision imported

2015-06-22T00:58:48Z

1 revision imported

New page

This topic explains how to load a modified proftpd.conf file at NAS startup to disable availability of login with root/admin account on the FTP server.

 

== Skills required ==

Being able to connect to NAS via ssh (e.g use PuTTY) Being able to edit files with vi 

== Prerequisites ==

Check the following page to create the autorun.sh script : [[Running Your Own Application at Startup|Running_Your_Own_Application_at_Startup]] '''Using Method #3 is recommended to do next steps''' 

== How To ==

Login to your NAS via SSH and do the next steps. 

==== Edit proftpd.conf ====

1.  Make a copy of your proftpd.conf file : 
<pre>cp /etc/config/proftpd.conf /etc/config/proftpd.conf.sec
</pre>
2.  Edit the copy with vi (type "i" to switch to edit mode) 
<pre>vi /etc/config/proftpd.conf.sec
</pre>
<pre>ServerName "ProFTPD"
ServerType standalone
DefaultServer on
RootLogin on
</pre>
On line "RootLogin" change "on" with "off" and save the file (use "esc" key and type ":wq") 
<pre>ServerName "ProFTPD"
ServerType standalone
DefaultServer on
RootLogin off
</pre>

==== Edit autorun.sh ====

 

1. Edit your autorun.sh (path names according to Method #3 of [[Running Your Own Application at Startup]]) 
<pre>vi /share/HDA_DATA/.qpkg/autorun/autorun.sh
</pre>
2.  Paste the following lines in vi (type "i" to switch to edit mode) 
<pre>#!/bin/sh
cp /etc/config/proftpd.conf.sec /etc/config/proftpd.conf
/etc/init.d/ftp.sh reconfig</pre>
 Then, save the file (use "esc" key and type ":wq") 

 

Now, at each NAS startup, the FTP server will use your proftpd.conf.sec configuration file and will protect your server against root/admin logins.

If you require root/admin rights when using your FTP server, consider using another user with same rights and a strong password.

 

[[Category:FTP_Server|F]]

Ftp Disable RootLogin - Revision history

Admin: 1 revision imported