Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[dalbert]

Is there a way to access shared volume(s) via http?

Is there a way to suppress http access to important files
that might pose a security risk: e.g. stuff in /etc like:
    /etc/passwd
    /etc/shadow
    /etc/ez-ipupdate.conf
    /etc/fstab
    /etc/mtab
    /etc/inittab
    /etc/hosts
    /etc/protocols
    /etc/services

[fordem]

I could be wrong on this ....

a) I believe if you downgrade to 1.04 those files will no longer be accessible
2) I believe http file access will be available in a future firmware release - there is an undocumented web page - http://<ip-address-of-DNS>/web/wfs_login.asp.

The way I heard it, preliminary code for the http file access was left in the 1.05 release leading to the insecurities that have upset many persons.

[D-Link Multimedia]

Yes a preliminary HTTP file server was left in 1.05 however this was only on the DNS-323 and did not affect the DNS-321.

We are still looking into it.

[fordem]

Yes a preliminary HTTP file server was left in 1.05 however this was only on the DNS-323 and did not affect the DNS-321.

We are still looking into it.

Oops - forgot which forum I was in ....