[cobalt-users] Anonymous FTP Safety/Security

[David Dean <david_dean@xxxxxxx>]

Hello,

How safe (or unsafe) is it for domains on a system to have anon FTP service? I
have recently noticed in my "last" (ftp connections) log, numerous daily
scans/connections to all the anon FTP accounts on our server. There are only
about 30 or so and so far just scans.  However, I am wondering about the
security risks involved here. I have a 2 simultaneous-user limit enabled,
along with a 5 meg max upload quota, but is anon FTP all that secure even with
these low settings?  Couldn't anyone who discovers the anon FTP sites by
scanning IP blocks, just upload some rouge program to /incoming folder that
could possibly harm the system and it's users?


Thanks for your input and suggestions.

David D

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1