cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
526
Views
0
Helpful
2
Replies

Signature to prohibit delete of files/folders on ftp server

Jhun Banzuela
Beginner
Beginner

Hi,

Is there a signature that can detect ( and prohibit) delete action of files and folders on ftp server.

If none, is there a way to create customized signature?

we want our ftp server to allow only download and upload files and delete is not allowed from external network even they have privilege.

Regards,

Jhun

2 Replies 2

rhermes
Rising star
Rising star

It would be possible to create a TCP session signature that would trigger on the string "del" or "rm" with the destination IP address of your FTP server, but those text strings could appear in other traffic you may not want blocked.

The more reasonable way to accomplish this goal is to edit the user accounts on the FTP server to allow or deny the permissions you want the users to have. That way a privileged account could still manage your FTP server and perform all ftp functions.

- Bob

Thanks for the reply Bob.

We normally do all other tasks from internal network. From external network, we only allow download and upload.

So blocking delete from outside may be considered.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: