Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What I'm trying to do is to forward a specific FTP-User to a Honeypot, because the main server is for Shared Hosting and there's a lot of traffic, and I don't want to spend all the resources in monitoring users that I don't want to.

Is there a better way to obtain information of a Specific Shared Hosting User?

This is possible? The server is CentOS.

share|improve this question
    
I'm confused about what you actually want to do. Why forward a set of users to a honeypot? Why not disable their accounts? Why do you want to monitor those accounts? –  schroeder Sep 10 '12 at 21:57

1 Answer 1

To do this, you would need an FTP proxy which was capable of proxying to different actual FTP servers based on the username that was supplied.

Frox has this essential functionality; it can route users when they use user@actual.ftp.host syntax for their username. So clearly it is possible to implement a proxy that does what you want. However, I don't think Frox does exactly what you want, because you want one subset of users with normal names to be sent to one server, and all users not in that subset to default to a honeypot instead.

It might be possible to do what you want using the Connection Translation feature of ftp.proxy, but I've no experience with which to say.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.