Atomicorp

Hi,

I have a question regarding ProFTPd and mod_ifsession... as you might have gathered from the subject!

I have been looking for a way to restrict specified FTP users so that they can only log in from specific IP addresses.

After much research, I've come up with the following, which looks like it should work, if I had a proftpd binary that supports DSOs -

/etc/proftpd.conf -

LoadModule mod_ifsession.c

...

<IfUser restrictedftpusername>
<Limit LOGIN>
Order Allow,Deny
Allow from 1.2.3.4, 5.6.7.8
Deny from all
</Limit>
</IfUser>

The problem is that this doesn't work, so I presume that my proftpd binary does not support DSOs.

Although - if I run proftpd manually I receive the following error -

- Fatal: LoadModule: error loading module 'mod_ifsession.c': Permission denied on line 12 of '/etc/proftpd.conf'

I've set 777 on the mod_ifsession.c file, tried copying it to various locations (libexec, contrib, and etc), but I cannot make it work.

I am using Plesk 9, and -
psa-proftpd-1.3.2-6.el5.art
psa-proftpd-xinetd-1.3.1-cos5.build92090714.19

1/ Is there any way to determine what modules were compiled into the proftpd binary, and whether it supports DSOs?
2/ If my problem is that the .art rpm does not support DSOs, are there any plans to revise this?
3/ And if i've got any (or all!) of the above wrong... how and what's the best way of achieving this?!

Many thanks for any help.

We added ifsession support to 1.3.2a, which is available in the ASL 2.0 channel. If you're using ASL you can grab that with:


yum upgrade psa-proftpd

then run:
asl -s -f

and it will enable the module for you automatically.

Hi,

Thanks for the response.

No, I'm not using ASL - as yet. Will have to speak to the boss on that one.

Will the rpms filter down to the standard repos in time? Is there any other way of obtaining this individual package?

Thanks again!

I was just looking at the proftpd dev tree, and it looks like was merged into the main archive for the 1.3.3 release. Thats right around the corner it looks like

That's good to know, thanks.

I've also been rewarded with a task to have a look at ASL and what it could do for us, so hopefully we will be upgrading in the near future anyway!

Thanks for your help.