FileZilla Forums

Welcome to the official discussion forums for FileZilla
Donate to project
It is currently 2014-04-19 07:08

All times are UTC




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: IP Filtering
PostPosted: 2013-01-25 00:28 
Offline
500 Command not understood

Joined: 2013-01-25 00:19
Posts: 2
Hi,

I have been given a project needing an FTP server with IP Filtering. I have searched the forum, and read through many pages of posts, but I wasn't able to get a clearer picture.

Here is what I am needing to do:

Block * traffic at the server level

Allow only single IP, say 192.168.100.1, access for user1

Allow * access for user2

Allow CIDR range for user3

Is that possible? I've used Filezilla Server before, but I've never had to use IP Filtering to the extend that's needed in this case.

TIA for any information.


Top
 Profile  
 
 Post subject: Re: IP Filtering
PostPosted: 2013-01-25 01:46 
Offline
226 Transfer OK
User avatar

Joined: 2006-05-01 03:28
Posts: 19646
Location: Germany
IP filtering in FileZilla Server is possible on three stages:
1. Global. The same for anyone accessing your server.
2. Group level.
3. User level.

For your case I recommend using the IP filtering on User level. There's an IP Filter tab in the FTP user account setup you can use for this.
The upper field is for blacklisting. User 1 and user 3 would need to have an asterisk (*) set there (it disallows everyone using the account from accessing).
The lower field is used for whitelisting and does only work together with the other one. It defines exceptions from the blacklisting rule above, so you'd specify the single IP in the user 1 account setup and the CIDR range in setup for user 3.

User 2 doesn't need to have any entry since ''Allow all'' is default. This is, of course, under the assumption you didn't specify anything in the global or group settings (if used).

_________________
### BEGIN SIGNATURE BLOCK ###
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
All support requests per PM will be ignored!
### END SIGNATURE BLOCK ###


Top
 Profile  
 
 Post subject: Re: IP Filtering
PostPosted: 2013-01-25 06:14 
Offline
500 Command not understood

Joined: 2013-01-25 00:19
Posts: 2
boco wrote:
IP filtering in FileZilla Server is possible on three stages:
1. Global. The same for anyone accessing your server.
2. Group level.
3. User level.

For your case I recommend using the IP filtering on User level. There's an IP Filter tab in the FTP user account setup you can use for this.
The upper field is for blacklisting. User 1 and user 3 would need to have an asterisk (*) set there (it disallows everyone using the account from accessing).
The lower field is used for whitelisting and does only work together with the other one. It defines exceptions from the blacklisting rule above, so you'd specify the single IP in the user 1 account setup and the CIDR range in setup for user 3.

User 2 doesn't need to have any entry since ''Allow all'' is default. This is, of course, under the assumption you didn't specify anything in the global or group settings (if used).


Thank you very much for the information! Just one little bit of clarification:

I cannot have a server that blocks everything by default (global), and then allow * at the user level so only that particular user can access FTP everywhere?

Thanks again!


Top
 Profile  
 
 Post subject: Re: IP Filtering
PostPosted: 2013-01-25 06:58 
Offline
Site Admin
User avatar

Joined: 2004-02-23 20:49
Posts: 22530
Quote:
I cannot have a server that blocks everything by default (global), and then allow * at the user level so only that particular user can access FTP everywhere?


Correct.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC


Who is online

Users browsing this forum: popup421 and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Dedicated server provided by Artmotion.
Forum sponsored by Everyware.ch.
Powered by phpBB® Forum Software © phpBB Group