• December 12, 2019, 04:43:37 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Network Shares - anonymous user FTP access can't be blocked for USB Drive  (Read 3125 times)

amirza

  • Level 1 Member
  • *
  • Posts: 3

Hi,

I know the default settings for network shares is that all accounts including "anonymous" can access using FTP. But, you can modify that and allow specific users to access via FTP.

However, when I plugged in an external USB drive, I am unable to modify its network shares settings. Therefore, "anonymous" user can by default access my external USB drive via FTP. I couldn't find a way to block that.

Could someone please advise how to put a blockage? Or by default stop "anonymous" user FTP access on all network shares?

Thanks
Logged

amirza

  • Level 1 Member
  • *
  • Posts: 3
Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
« Reply #1 on: November 16, 2012, 01:52:06 AM »

Helloooo .... Is it only me who is having this issue? Come on, is there any GURU out there.. Please contribute...
Logged

pizzaking

  • Level 2 Member
  • **
  • Posts: 34
Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
« Reply #2 on: November 16, 2012, 04:37:32 AM »

I don't use ftp access, but i have just checked, and you are completely right. Anonymous users are allowed full read/write access, and the settings can not be modified. This is a serious security issue, and you should repport it as a bug in the Firmware Wishlist thread (http://forums.dlink.com/index.php?topic=50768.0)

I would recommend disabling the ftp-server until this is fixed, and if you can't wait for this to happen you could install vsftp through funplug: http://dns323.kood.org/howto:vsftpd
Logged

pizzaking

  • Level 2 Member
  • **
  • Posts: 34
Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
« Reply #3 on: November 16, 2012, 07:00:48 AM »

Actually, I may have a temporary solution to the problem, though it's not ideal in any way!:

Log in to your NAS with ftp using your password protected account, and create a new folder in the root of the USB drive. Then set the permissions on the new folder, only to give owner and group read/write access. Then you can copy the content of your USB drive to this new folder, which anonymous user can't access.
Logged

JavaLawyer

  • BETA Tester
  • Level 15 Member
  • *
  • Posts: 12190
  • D-Link Global Forum Moderator
    • FoundFootageCritic
Re: Network Shares - anonymous user FTP access can't be blocked for USB Drive
« Reply #4 on: November 16, 2012, 07:12:25 AM »

I added this issue to the Firmware wishlist sticky.  ;)
Logged
Find answers here: D-Link ShareCenter FAQ I D-Link Network Camera FAQ
There's no such thing as too many backups FFC