ioFTPD Next Suggestions

[WebY]

they are no other protection againts hacked server?

[Grendel]

What's wrong with ioFTPD.exe anyway?

Absolutely Correct....NeoXed
Very easy to answer.....ABSOLUTELY NOTHING IS WRONG
In my opinion, there's NO NEED to change the name of .EXE,
but this must decide Darkone, of course.

The only reason to rename the .exe is for use
on servers hacked by some stupid kiddies
cause they can hide the daemon-task better now.

I know many administrators,
checking every server additionally for all known
FTP-daemons (which can be used for a "hacked" ftp).
If you can rename ioFTPD.exe to something inconspicuous
it will be much more difficult to find...

[Grendel]

Originally posted by WebY
they are no other protection againts hacked server?

@WebY:

A fixed name for the process is the easiest way,
so you can check the server's processes automatically with
Enterprise-Tools like NETIQ's Appmanager 5.xx ect. ,
which can give infos to admins.

Do you have a better idea ?
So please tell us

[WebY]

K,K:banana:

Plz made in the new Version the "Current Speed" Variable

[-=DoBBeR=-]

I think this issue has been up before at some point, but it really would be nice if, when ip is not allowed, ioftpd could show that to the user. My couriers keep thinking their account is screwed up when they get "login incorrect", or at least make it an option in config?

tnx

[neoxed]

Originally posted by -=DoBBeR=-
I think this issue has been up before at some point, but it really would be nice if, when ip is not allowed, ioftpd could show that to the user. My couriers keep thinking their account is screwed up when they get "login incorrect", or at least make it an option in config?

Its been discussed before, the anwser was (and probably still is) no. Simply because it creates a security risk; the idea is to give as little information as possible. The informative error message is really only relevant to administrators, thus why it's logged to logs\Error.log.

In the event that an attacker was attempting to obtain someone else's login/password to the FTP server, via brute forcing, why give them "tips" to what they're doing wrong?

[-=DoBBeR=-]

sure it could make a system more vulnerable, but why not let the owner of the site decide that? through an option in ini?
Another thing that bothers me is that in error.log the people with "wrong" ip show up with hosts instead of ip, why not both? or just ip? that would certainly make it easier and faster for siteops to first find out whats wrong, and then add new ip. As it is right now I need to resolve host with ping, and then add it to allowed ips, after first being bugged by some user who thinks I've ****ed up his account =)

[neoxed]

Originally posted by -=DoBBeR=-
sure it could make a system more vulnerable, but why not let the owner of the site decide that? through an option in ini?

Because it's another unnecessary configuration option. Darkone did a fairly large cleanup of the ioFTPD.ini for Beta-5.4, to remove 'excessive' options. I doubt his stance on this has changed.

Aside that, if a client says that he or she is having trouble logging in; if you're using ioA, all you would have to do is type SITE ERRLOG to display the Error.log. Are you really that lazy?

[Mouton]

not as if sitebots didn't echo the errorlog wherever u want either...
u could even make it send user error to the user himself (on irc or email or whatever) with a little work.
if fact, that would be even better than what u suggest. the user would receive a notice each time a login fails using his username, and the reason why it failed... he would know if someone tried to use his account.
very good idea for a script...
way to go DoBBeR!

[-=DoBBeR=-]

yeah, would work nice as long as ppl are named the same on ftp as on irc, otherwise I'm fuxx0rd =) but sure, I think I'll give that a try =) tnx mouton

[Mouton]

well, most sites use site invite... or msg sitebot !invite...
u just need to store the latest nick from those commands is a little db (text file).
maybe your sitebot could even remove the nick when the user /part or quits irc... just to make sure u don't pm someone you shouldn't.

[dasOp]

Originally posted by jron
Please, for the love of all things nerdy, change that damn red shit blob of an icon :P it haunts me at night... really.

If you mean the icon ioTrayIcon uses (which I stole from the older io's yes) then send me replacement icons or replace them yourself, there are apps that can do that.