Custom Welcome Message
Moderator: Project members
-
- 500 Command not understood
- Posts: 1
- Joined: 2021-10-06 00:56
Custom Welcome Message
I've just downloaded and installed the latest FileZilla Server and to conform to our security standards I need to adjust the FTP welcome message so it doesn't include the software name or version information. I can see info online that this should be possible but I'm not seeing the option in the Administration interface. Am I missing something or has this option been removed?
Re: Custom Welcome Message
I confirm that custom messages aren't currently implemented. More of a forgotten thing than an intentional measure. Will probably make a comeback in one of the next releases.
Re: Custom Welcome Message
It's trivially easy to identify the used server product and version based on behavior alone. Hiding it is just a failed attempt at security by obscurity.
Re: Custom Welcome Message
That's the old way of thinking.
Security by obscurity is rightly dismissed as a LONE security measure. But nowadays obscurity is recommended as an EXTRA, INDEPENDENT security measure.
Failing to include the possibility to hide this information was a bad call.