D-Link Forums

The Graveyard - Products No Longer Supported => D-Link Storage => DNS-323 => Topic started by: mamurao on March 03, 2009, 12:31:38 PM

Title: Guest login able to login via gui to Download manager
Post by: mamurao on March 03, 2009, 12:31:38 PM

Hello,

I have enabled ftp on my dns-323 and ftp works great. Setup guest and administrator login and they are working. I was shocked to find out that the guest login can login to the gui download manager. It's a good thing the guest could not get in the configuration mode. Is this a bug on 1.06 firmware or by design. inputs are appreciated

Title: Re: Guest login able to login via gui to Download manager
Post by: ECF on March 11, 2009, 11:57:34 AM

This is not a bug it is like this by design to only allow you to get into the Download manager and not the  Configuration options as that would be a huge security flaw.

Title: Re: Guest login able to login via gui to Download manager
Post by: mamurao on March 12, 2009, 08:31:35 AM

Thanks ECF, but any ideas why a guest is allowed in the download portion? As i expected the users/groups are only for FTP access. I resolve this by changing my port forward in the router to something else instead of port 80. Now my friends can only access via ftp and will not see my dns-323 directly.

Title: Re: Guest login able to login via gui to Download manager
Post by: ECF on March 20, 2009, 02:26:56 PM

I am sorry I don't have further details on this.