xftpd vs noretrieve and symlinks

[atlauren]

Hello all,

I’m having trouble getting xftpd to refuse downloads from a directory which is (supposedly) protected with the noretrieve command. In coming connections are defined into classes in the ftpaccess file, and then noretrieve specifies absolute paths and the target share directory.

An example (with bogus networks) from the ftpaccess file would be:

========
class ucianon anonymous 10.0.0.0/16 192.168.0.0/16
class anonusers anonymous *

noretrieve absolute class=anonusers /Library/FTPServer/FTPRoot/Archive/
noretrieve absolute class=anonusers /Library/FTPServer/FTPRoot/Archive
noretrieve absolute class=anonusers /Volumes/ArchiveData/Archive/
noretrieve absolute class=anonusers /Volumes/ArchiveData/Archive
=====

The first two noretrieve lines reference the symlink that Workgroup Manager drops into FTPRoot; the second two reference the physical directory itself. You’ll notice that I have lines with and without the trailing slash (/) to denote that it’s a directory — they all fail, meaning that downloads succeed when they’re supposed to fail.

I’ve gotten noretrieve to work when referenceing a physical directory inside of FTPRoot, but not WG’s symlink.

Any ideas? I’m working with Panther Server 10.3.9+yaddayadda.

Thank you,
Andrew

[Author]

Posts