Pureftpd no logging log-ins ?

[qwerty]

Hi,

I just switched to Pure-ftpd due to the new Proftpd remote root exploit etc.

Everything works fine, no problems whatsoever, BUT 'last' doesn't show the log-ins of ftp users like proftpd used to

eg. if you do "last -50a" it will not show who logged in via ftp etc, and with proftpd this worked.

Anyone know if its possible at all to enable this with pure-ftpd, so that I can see who is logging in etc? Thanks

cPanel.net Support Ticket Number:

[casey]

Originally posted by qwerty
Hi,

I just switched to Pure-ftpd due to the new Proftpd remote root exploit etc.

Everything works fine, no problems whatsoever, BUT 'last' doesn't show the log-ins of ftp users like proftpd used to

eg. if you do "last -50a" it will not show who logged in via ftp etc, and with proftpd this worked.

Anyone know if its possible at all to enable this with pure-ftpd, so that I can see who is logging in etc? Thanks

cPanel.net Support Ticket Number:

I don't know about just logins, but you can view actions in
/var/log/xferlog

cPanel.net Support Ticket Number:

[qwerty]

thanks for that but that's not what I'm after. Command such as. eg. "last -50a" will show the last 50 people that logged in (ftp and ssh), when and for how long, and their full ip/hostname.

This is ideal as we only allow access to customers from one country and can catch any unauthorized access immediately.

I believe last reads from /var/log/wtmp - and Pureftpd doesnt appear to be playing along :/

cPanel.net Support Ticket Number:

[Host4u2]

From WHM/Tweak FTP Settings

Pure-ftpd

Advantages:
* Faster Login Time
* Smaller Memory Footprint
* Allows Virtual Access on any ip address
* Better Security Model
* Deals better with Software Raid systems

Disadvantages:
* No cPanel Access Log or Bandwidth Stats

cPanel.net Support Ticket Number:

[qwerty]

I don't think 'last' reads from cpanel access logs .. I'm pretty sure this is a different thing altogether.

[clement01]

I read that there is a pure-ftpwho command which we can use to view who is logon doing what. But I am not sure whether it gives a history like "last" did.

I have just switch to pureftpd due to the connection timeout problem that proftpd has.

Still trying to figure out more on pureftpd.