|
jimcpl
|
 |
« on: February 02, 2010, 08:17:55 AM » |
|
Hi,
I have Schufti's firmware for awhile in my SMCWAPS-G, which I use mostly as a NAS on my internal network.
Tonight, I had to allow FTP from outside my network for a friend to download a large file, so I opened the FTP port on my main router. I was watching the vsftpd.log, and after a few minutes, I noticed a bunch of login attempts from an IP address that I didn't recognize, in China, apparently.
Luckily, I had only one user enabled in the vsftpd, with an 'unusual' username, and also I had modified vsftpd.conf to disable anonymous access, so the login attempts (which were for users like Administrator, Administrateur, paul, steve, etc.) have all failed. The download for my friend is still going, so I can't do anything at this point, but, for the future, I was wondering if the VSFTPD in the firmware will enforce if I put IP addresses:
ALL: xx.yy.zz.zz
in the /etc/hosts.deny
??
Thanks, Jim
|