nerdexam
Red_Hat

RH302 · Question #136

You have a domain in your LAN named example.com and cracker.org. Allow the FTP connection only from local domain. Deny the FTP connection from cracker.org

To allow FTP from example.com and deny from cracker.org using tcp_wrappers: (Assuming "local domain" refers to example.com based on the question context) 1. Edit /etc/hosts.deny: vsftpd: ALL EXCEPT .example.com 2. Edit /etc/hosts.allow: vsftpd: .example.com Explanation: Similar…

Security

Question

You have a domain in your LAN named example.com and cracker.org. Allow the FTP connection only from local domain. Deny the FTP connection from cracker.org

Explanation

To allow FTP from example.com and deny from cracker.org using tcp_wrappers: (Assuming "local domain" refers to example.com based on the question context)

  1. Edit /etc/hosts.deny: vsftpd: ALL EXCEPT .example.com

  2. Edit /etc/hosts.allow: vsftpd: .example.com

Explanation: Similar to SSH configuration, this uses tcp_wrappers for FTP (assuming 'vsftpd' or similar as the service daemon name). The /etc/hosts.allow entry explicitly permits FTP connections from example.com. The /etc/hosts.deny entry denies all FTP connections except those from example.com. This combination allows FTP only from example.com and implicitly denies it from cracker.org (and any other domain).

Topics

#TCP wrappers#FTP access control#hosts.allow#hosts.deny

Community Discussion

No community discussion yet for this question.

Full RH302 Practice