View Single Post
Old 09-13-2004, 04:26 PM  
neoxed
Too much time...
 
Join Date: May 2003
Posts: 1,326
Default

Quote:
Originally posted by -=DoBBeR=-
I think this issue has been up before at some point, but it really would be nice if, when ip is not allowed, ioftpd could show that to the user. My couriers keep thinking their account is screwed up when they get "login incorrect", or at least make it an option in config?
Its been discussed before, the anwser was (and probably still is) no. Simply because it creates a security risk; the idea is to give as little information as possible. The informative error message is really only relevant to administrators, thus why it's logged to logs\Error.log.

In the event that an attacker was attempting to obtain someone else's login/password to the FTP server, via brute forcing, why give them "tips" to what they're doing wrong?
neoxed is offline   Reply With Quote