Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[amirza]

Hi,

I know the default settings for network shares is that all accounts including "anonymous" can access using FTP. But, you can modify that and allow specific users to access via FTP.

However, when I plugged in an external USB drive, I am unable to modify its network shares settings. Therefore, "anonymous" user can by default access my external USB drive via FTP. I couldn't find a way to block that.

Could someone please advise how to put a blockage? Or by default stop "anonymous" user FTP access on all network shares?

Thanks

[amirza]

Helloooo .... Is it only me who is having this issue? Come on, is there any GURU out there.. Please contribute...

[pizzaking]

I don't use ftp access, but i have just checked, and you are completely right. Anonymous users are allowed full read/write access, and the settings can not be modified. This is a serious security issue, and you should repport it as a bug in the Firmware Wishlist thread (http://forums.dlink.com/index.php?topic=50768.0)

I would recommend disabling the ftp-server until this is fixed, and if you can't wait for this to happen you could install vsftp through funplug: http://dns323.kood.org/howto:vsftpd

[pizzaking]

Actually, I may have a temporary solution to the problem, though it's not ideal in any way!:

Log in to your NAS with ftp using your password protected account, and create a new folder in the root of the USB drive. Then set the permissions on the new folder, only to give owner and group read/write access. Then you can copy the content of your USB drive to this new folder, which anonymous user can't access.

[JavaLawyer]

I added this issue to the Firmware wishlist sticky.