Great Circle Associates Firewalls
(October 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Running ftpd on another port
From: long-morrow @ CS . YALE . EDU
Date: Mon, 2 Oct 1995 11:11:49 -0400 (EDT)
To: cosborn @ bbn . com, firewalls @ greatcircle . com

>I am trying to run 2 ftp servers on one machine. One fptd will always run 
>chroot and be used primarily for the public(wu-ftpd has all those nice 
>"features").  The other ftpd will be  skey enabled and  will be have access 
>to the rest of the file system. One problem: I can't figure out how to 
>have the logdaemon ftpd run on another port. It can run on any port(high 
>ports are fine!). I can't find a compile switch or parameter on the 
>daemon(clients of course are no problem.)  

You can use tcp_wrapper programs to exec either (or none) of the two
ftp servers based on incoming IP address (ACLs of IP hosts, networks or
domain names).   

But if you just want to run an internal skey enabled ftpd on a
different port than your WU-FTP daemon you should be able to create a
special service name for it (ie. skeyftp) in the /etc/services file (on
Unix) and run your skey ftpd out of inetd by putting an entry in the
/etc/inetd.conf file for it.

skeyftp stream tcp    nowait  root    /usr/local/etc/skey.ftpd

I run a inbound telnet server which uses the skey login program on TCP
port 22 this way and leave the normal telnet program on port 23
(actually I often run a tarbaby telnetd on port 23 on machines likely
to be attacked via telnet because of their function or hostname):

# run secure key login telnet daemon on port 22
# telnetd invokes S/keylogin 
#
skeylogin stream tcp    nowait  root    /usr/local/etc/skey.telnetd
#
# tar baby telnet server
telnet  stream  tcp nowait root  /usr/local/etc/in.tarbaby.telnetd   in.telnetd

- Morrow


Indexed By Date Previous: Re: Brent's book
From: Brent @ GreatCircle . COM (Brent Chapman)
Next: Re: Mail Proxy
From: long-morrow @ CS . YALE . EDU
Indexed By Thread Previous: Re: Running ftpd on another port
From: Slava Kritov <scorp @ un . kiev . ua>
Next: RFC 1597
From: toon @ cem-bb . e-mail . com

Google
 
Search Internet Search www.greatcircle.com