D-Link Forums

The Graveyard - Products No Longer Supported => D-Link Storage => DNS-320L => Topic started by: amirza on November 14, 2012, 04:22:17 AM

Title: Network Shares - anonymous user FTP access can't be blocked for USB Drive
Post by: amirza on November 14, 2012, 04:22:17 AM

Hi,

I know the default settings for network shares is that all accounts including "anonymous" can access using FTP. But, you can modify that and allow specific users to access via FTP.

However, when I plugged in an external USB drive, I am unable to modify its network shares settings. Therefore, "anonymous" user can by default access my external USB drive via FTP. I couldn't find a way to block that.

Could someone please advise how to put a blockage? Or by default stop "anonymous" user FTP access on all network shares?

Thanks

Title: Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
Post by: amirza on November 16, 2012, 01:52:06 AM

Helloooo .... Is it only me who is having this issue? Come on, is there any GURU out there.. Please contribute...

Title: Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
Post by: pizzaking on November 16, 2012, 04:37:32 AM

I don't use ftp access, but i have just checked, and you are completely right. Anonymous users are allowed full read/write access, and the settings can not be modified. This is a serious security issue, and you should repport it as a bug in the Firmware Wishlist thread (http://forums.dlink.com/index.php?topic=50768.0 (http://forums.dlink.com/index.php?topic=50768.0))

I would recommend disabling the ftp-server until this is fixed, and if you can't wait for this to happen you could install vsftp through funplug: http://dns323.kood.org/howto:vsftpd (http://dns323.kood.org/howto:vsftpd)

Title: Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
Post by: pizzaking on November 16, 2012, 07:00:48 AM

Actually, I may have a temporary solution to the problem, though it's not ideal in any way!:

Log in to your NAS with ftp using your password protected account, and create a new folder in the root of the USB drive. Then set the permissions on the new folder, only to give owner and group read/write access. Then you can copy the content of your USB drive to this new folder, which anonymous user can't access.

Title: Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
Post by: JavaLawyer on November 16, 2012, 07:12:25 AM

I added this issue to the Firmware wishlist sticky.  ;)