binding ftp to an ip/interface

[chris-c]

Hi
Im running a server with 5 different network interfaces connected to
different switches (solaris 8). It has the tcp wrappered version of
ftp on it. I would like to bind the ftp service to one ip
address/interface so its not listening on all the other ones for
security. Could someone tell me if this is easily done or if I need to
use a different ftp package.
Thanks

[Davide Bianchi]

chris-c <cconnell_1@lycos.com> wrote:

> Im running a server with 5 different network interfaces

<snip>

> I would like to bind the ftp service to one ip
> address/interface

You can use ipfilter to allow only one interface to use ftp,
this will drop or reject any packets coming from other interfaces
and effectively allowing only one of them to connect using ftp
or whatever, or you can use the tcpwrapper to refuse connection
from all networks but the one connected to the interface you
want to use, this only if you can distinguish them of course.

Davide

--
| No problem is so formidable that you can't just walk away from it.
|
|
|

[Bill Marcum]

On 17 Apr 2004 01:12:58 -0700, chris-c
<cconnell_1@lycos.com> wrote:

> Hi
> Im running a server with 5 different network interfaces connected to
> different switches (solaris 8). It has the tcp wrappered version of
> ftp on it. I would like to bind the ftp service to one ip
> address/interface so its not listening on all the other ones for
> security. Could someone tell me if this is easily done or if I need to
> use a different ftp package.
> Thanks

If it uses tcp-wrappers, you can make appropriate entries in
/etc/hosts.allow or /etc/hosts.deny.

--
Giraffe: a ruminant with a view.