if you make your incoming Write-only then they will hav elottle point in puting stuff there.. We do this, in several places, and have a script move the incoming stuff elsewhere at regular intervals too.
(not that I disagree with your patch but I often mode 'dot files' e.g. .cshrc, or even CVS "#" files On Sat, 19 Jan 2002, Aaron Smith wrote: > I got sick of (presumably) warez people probing my anonymous ftp site and > dropping all kinds of hard-to-delete trash in incoming, so I patched my > ftpd to only allow directories to start with alphanumerics. There's > probably a better solution, but this works for me so I figure'd I'd share. > > Combining this with a umask that doesn't allow reading uploaded files keeps > things reasonably well in hand. > > --Aaron > > > Index: ftpd.c > =================================================================== > RCS file: /usr/cvs/src/libexec/ftpd/ftpd.c,v > retrieving revision 1.62.2.15 > diff -u -r1.62.2.15 ftpd.c > --- ftpd.c 2001/12/18 18:35:55 1.62.2.15 > +++ ftpd.c 2002/01/19 09:47:42 > @@ -2216,6 +2216,12 @@ > { > > LOGCMD("mkdir", name); > + > + if (!isalnum(*name)) { > + reply(521, "Bite me."); > + return; > + } > + > if (mkdir(name, 0777) < 0) > perror_reply(550, name); > else > > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message