Server :: Vsftpd With SSL Auth But Force Plain Data?
Aug 26, 2010
I'd like to enable SSL authentication in vsftpd.conf but still somehow force plain data transfer; even if the client is capable of SSL data transfer. The way I understand the config, if I set ssl_enable=YES then if client wants to use SSL for data transfers, it can. I wish for force plain data transer, but still have SSL enabled for login. Is this possible with vsftpd?
View 1 Replies
ADVERTISEMENT
Apr 10, 2010
This is as far as FireFTP can go to make a connection.
Code:
220 Welcome to Steve Test SFTP service.
AUTH TLS
Proceed with negotiation.
PBSZ 0
All the basic vsftpd.conf advice followed:
Code:
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
[code]....
View 2 Replies
View Related
Sep 27, 2010
When I print receipts from certain company's emails, they span three pages or more bloated with images, links and overly large text. I can view the message in plain text by setting the preferences to only display text instead of html, but it doesn't affect what is printed. I still get the full HTML page printed. Is there a way to force evolution to print in plain text instead of HTML?
View 3 Replies
View Related
Mar 8, 2011
I'm a bit lost with the PHP/Sendmail configuration, maybe somebody could help me getting back on the right track. Following situation:
Postfix:
* accepts smtp on port 25 but from his own domains. Some policy and spamchecks through amavisd are made.
* accepts submission on port 587 and 465 from authenticated users only. Quota and spamchecks prevent outgoing spam.
So I'm enforcing a very strong outgoing spam-policy but the users are still able to use the php mail() function to send spam through the /usr/sbin/sendmail command.
My users have access to their own php.ini so my idea was to somehow enforce the delivery through the local postfix on port 587 or 465 and just let them enter their user/pass in their php.ini. (I suppose, their might be a cleaner-solution ).
Unfortunately, my configurations like smtp_host, port, user etc. are getting ignored if the sendmail_path line is active. But if I comment this line out, php just uses the default, which is the same as configured in the sendmail_path line - so it's active whether i use the line or not (setting it to an invalid command breaks the mail() function completely).
how can I enforce my anti-spam policy on the php mail() command?For my ssh users I just blocked the outgoing connection to localhost on port 25 which seems to work so far, but somehow the postfix-sendmail-wrapper just ignores this.
View 3 Replies
View Related
May 5, 2011
How to easily convert to/from plain machine-readable HEX (without anpaddings/offsets/character view) with xdd or hexdump?I'm tired of digging of some special format strings (and finding out that it suddenly starts wrapping lines after N characters or skip lines) or writing Perl oneliners every time.Why is it not as simple as base64/base64 -d?
View 2 Replies
View Related
Feb 10, 2011
Any clue? I'm using the same key for root login and it works fine (also works fine for SFTP but i hate using that cause its extremely slow)
View 2 Replies
View Related
Jan 10, 2011
Lately I have been receiving this in my auth.log file. It seems to be repeating over and over, and I didn't know if was anything normal or something I should be worried about...
Code:
View 1 Replies
View Related
Apr 13, 2011
i have a vsftpd server running well but i want to make/force all users to use sftp and not just ftp is this possible?
View 1 Replies
View Related
Apr 14, 2010
CentOS: 5.4
Exim: 4.63
I want to setup Exim to only allow sending mail from the localhost and externally with Plain authentication. I know I should use TLS but not all software supports TLS, I want Exim to use its own userpass file not the local system. I have spent a few days trying to get this setup, so far I have followed this: [URL].... But unsure what to change to remove the need for TLS.
[code]....
View 2 Replies
View Related
Jul 29, 2010
Been a while but have a few scripts that need to hit a website that's local to that network, but also a public site. Currently there is an .htaccess in that folder with this lockdown;
AuthType Basic
AuthName "Restricated"
Require valid-user
Now, can I break that somehow and say (here is my english translation)
[Code]..
View 1 Replies
View Related
May 21, 2010
I'm trying to add the -audit option to X Server. I run ps -ef | grep -v grep | grep "bin/X" and get: root 2511 2506 0 10:35 tty7 00:00:09 /usr/bin/X:0 -br -verbose -auth /var/run/dgm/auth-for-gdm-sScn1P/database -nolisten tcp vt7 So I'm thinking that I need to add -audit to the /usr/bin/X file, but I believe that it's binary and created by something else, but I can't find that "something else". How on earth can I add this option? I have opened up 1,000,000,000,000,000,000,000 files (slight exaggeration) and I've come up empty.
View 1 Replies
View Related
Dec 28, 2010
operating system: CentOS 5.5 git version:1.7.3.4 ldap server:OpenLdap Http server:Apache 2.2 the software above have been installed. How to config /etc/httpd/conf.d/gitweb.conf file to let git authed by ldap?
View 2 Replies
View Related
Aug 3, 2011
I am a bit of a linux newbie, but have been gradually teaching myself how to set up Sendmail 8.13.8 on a CentOS system to handle our MX mail for various domains we own on our local server. Configuration has gone well so far, except I cannot seem to get Outlook to authenticate with the SMTP server and I must readily admit to some large gaps in my knowledge. For testing purposes, I have tried to authenticate using Telnet with the following results:
Code:
220 my.domain.com ESMTP Sendmail 8.13.8/8.13.8; Wed, 3 Aug 2011 14:27:00 GMT
ehlo my.domain.com
250-my.domain.com Hello mytelnethost.btcentralplus.com [109.xxx.xxx.xx], pleased to meet you
250-ENHANCEDSTATUSCODES
[Code]...
View 7 Replies
View Related
Jan 20, 2011
I want to use squid Proxy to ask username password to user for internet usage and if username password not correct squid stops user access.I use following installation commands and configuration but still squid not asking for username password, and I can use Internet browsing by defining proxy in my client proxy.I use following installataion commands one by one but non of them works, and configure squid to use ncsa_auth../configure --enable-delay-pools --enable-linux-netfilter --enable-arp-acl --disable-ident-lookups --enable-snmp --enable-removal-policies
then I use
./configure --enable-delay-pools --enable-linux-netfilter --enable-arp-acl --disable-ident-lookups --enable-snmp --enable-removal-policies --enable-basic-auth-helpers
then I use
./configure --enable-delay-pools --enable-linux-netfilter --enable-arp-acl --disable-ident-lookups --enable-snmp --enable-removal-policies --enable-basic-auth-helpers=NCSA
with following squid.conf configuration one by one.
htpasswd /usr/local/squid/etc/passwd testuser
New password:
Re-type new password:
[code]....
No error received in access.log or /var/logs/messages files, nor on client screen, client still using internet browsing without asking username password by squid,
View 14 Replies
View Related
Dec 2, 2010
I'm hoping someone here can help, as I've been beating my head on the wall for a week now with little advancement. I've found a number of tutorials on setting this up, however none of them have gotten me 100% of the way there. Here's my situation: home-based Fedora server (Core 8), running sendmail 8.14.2-1. Connecting to hosting company's smtp server over port 587, to bypass Verizon's blocking of port 25.
My /etc/mail/sendmail.mc file looks like this (comment lines removed):Quote:
divert(-1)dnl
define(`SMART_HOST', `smtp2.datarealm.com')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 PLAIN')dnl
FEATURE(`authinfo',`hash -o /etc/mail/auth/client-info.db')dnl
define(`RELAY_MAILER', `esmtp')dnl
[Code]....
View 14 Replies
View Related
Aug 1, 2010
I got one last stop until I've fully configured my Sendmail server. I want the server to verify which address the sender is using when sending mail. Even though authenticated via SMTP AUTH or mailing from an IP listed as RELAY in access.db, the user should not be able to use whichever address he likes.
Ideally, I would like Sendmail to use a file that looks something like this: Username sername@Server.org
where, if logged in with Username, the only accepted sender address is Username@Server.org. As of now, Sendmail just verifies that the sender domain exists and then relays which I don't like. This also applies to a lot of other servers as well... for example in the cases where ISPs have blocked outgoing port 25 and let all their users use their SMTP server. I assume, if they don't use SMTP AUTH which is not the case where I am, that they have their entire IP range listed as RELAY and therefore, using my ISPs SMTP when in their net, I can send mail as whomever I like as long as the sender domain exists.
I've had a look at filters but haven't found any suitable and I assume that this might be realised through a Ruleset or something. What do you think? Have I missed something making this a really stupid suggestion or am I on to something? It would make my day
View 1 Replies
View Related
Jul 6, 2011
i had configured mail server in linux. i had configured sendmail in linux client . i have error while sending mail through thunderbird smtp auth error how can i resolv the issue .....
View 1 Replies
View Related
Apr 23, 2010
Is it possible to have the passwd file for svnserve encrypted, rather than store the usernames/passwords in plain text?
View 3 Replies
View Related
May 16, 2011
New machine, need to append my id_rsa.pub to my remote SSH box, cannot use ssh-copy-id because I cannot specify the port I've got the machine running on.
View 1 Replies
View Related
Mar 7, 2011
I have a CentOS 5 box that is a web server. When it generates emails, all emails should go out through our Exchange mail server.I believe our Exchange server requires NTLM authentication:
View 1 Replies
View Related
Jan 29, 2010
Is there anyway to monitor the current bandwidth in use by a user (NCSA auth) on squid? Occasionally we get a user downloading too many videos at once, which blocks bandwidth to other users on the network. As I have no idea which user it is until the end of the day (SARG reports), we just restart the squid server to disconnect their downloads.
View 6 Replies
View Related
Aug 31, 2009
OS: CentOS 5.3
vsftpd ver: vsftpd-2.0.5-12.el5_3.1
I installed vsftpd server in one of my servers using "yum install vsftpd" command. NFS server is running in the other server and mounted as "/data" in this FTP server. root in FTP server has also root authority in NFS server. All the files and sub-folders under "/data" in FTP server have 755 or 766 mode. Even I modified vsftpd setting to allow root login.
When I login as root to FTP server with FileZilla client, I can see all the file list in root home directory and move to /data directory. I can download any file in a local HDD but I can not download any file in /data directory.
View 1 Replies
View Related
Aug 3, 2010
pls tell me complete configuration of vsftpd server on redhat 5
View 1 Replies
View Related
Apr 14, 2010
I have just generated a new ssl key on my ftp server with the following command
Code:
I then put my new key onto my file server and attempted to connect to the FTP and it failed (this did work before with the default key).. I use curlFTPfs to mount the FTP directory locally as /ftpbackup, below is the command and the output.
Code:
Error connecting to ftp: server certificate not activated yet. As you see it gives an error about the certificate not being activated, I have looked this up and cant find a way to activate it.
Below is the contents of vsftpd.conf on the ftp server
Code:
View 1 Replies
View Related
Sep 17, 2010
I actually have a server and a client.The client must connect to the server (via internet) to access to external websites. (You can see the attachment, maybe it's more clear )My actual problem is, I have configure Squid on my server, but I want to force SSL for the connection between the client and the server.I didn't really find nice tutorials about on that, maybe someone have an idea ? Or maybe some indications ?
View 1 Replies
View Related
Jan 18, 2010
I just installed Ubuntu server and wish to run an apache web server from it. I have that setup, with each user having their individual folder. (E.G) apache root /var/www/ LazerPhreaks folder is /var/www/LazerPhreak/ so their website would be www.mysite.com/LazerPhreak/) I wish to setup vsftp to let each user access their individual folder and upload website files via ftp. How should I go about this?
View 1 Replies
View Related
Mar 13, 2010
After giving it some thought, I decided to bail on proftpd, which I've used for some time.
I used
Quote:
But when I search around with locate proftpd, there seems to be a lot of "leftover" stuff. I'd like to remove all traces. Possible?
Now, I installed vsftpd:
Quote:
But when I try to start it, I get:
Quote:
I tried to locate its conf file, but I get this:
Quote:
Though I know it's at:
Quote:
Also, there does not seem to be a log file at /var/log/vsftpd.log or anywhere else.
View 1 Replies
View Related
Feb 13, 2010
how to configure vsftpd? i use rhel-5 server.
View 1 Replies
View Related
Sep 5, 2010
I'm trying to add users.
(Translation: gebruiker = user)
I did this:
I want that only gebruiker1 can be in his map home/gebruikers/gebruiker1
But now he can see the whole server dir.
View 8 Replies
View Related
Mar 31, 2010
I have a vsftpd server configured and I cannot upload using anonymous account, I've trawled the net have have exhausted my search for answers. Here is my vsftpd.conf file
Code:
# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
[Code]...
View 9 Replies
View Related