Simonson

Registered
Jul 23, 2008
1
0
51
Hi,

In WHM I add a package that "Max FTP Accounts = 0" but, I still can FTP!
How can I disable FTP, specially when the package is for mail (xmail, x3mail) only?

Thanks,
Simon Son
 

cPanelDavidG

Technical Product Specialist
Nov 29, 2006
11,212
13
313
Houston, TX
cPanel Access Level
Root Administrator
Hi,

In WHM I add a package that "Max FTP Accounts = 0" but, I still can FTP!
How can I disable FTP, specially when the package is for mail (xmail, x3mail) only?

Thanks,
Simon Son
Note: Maximum FTP Accounts only means additional FTP accounts. It does not count the FTP account created for the cPanel user.

At this time, cPanel/WHM does not natively support creating a cPanel account that does not have FTP access.
 

bls24

Well-Known Member
May 12, 2007
78
0
156
I was able to disable it in WHM by unticking it from the Services panel and also blocking it in the Security Center.

Cpanel still creates the accounts, but the server settings will not allow any use of ftp.
For good measure, I also edited the conf file to change the ftp port to something that isn't standard.
 

balamm

Registered
Jun 6, 2006
1
0
151
Note: Maximum FTP Accounts only means additional FTP accounts. It does not count the FTP account created for the cPanel user.
Maybe it's time to correct this!
When I set something to '0', I expect that it means '0'.
Not 1+0 :rolleyes:

Just as I expect that unchecking "Shell Access" actually means ALL shell access for this account, not just additional logins.... blah!


At least edit the tag to make it clear that this won't disable ftp ;)

Anyway,
Why isn't there a way to entirely disable ftp use per user?
Out of 30 accounts/domains or so that I have on one server, there are only 2 or 3 that ever require ftp access.
Why do I have to leave that unwanted access in place?

There must be a way to deny access.
By placing a "deny from username" in the pure-ftp.conf maybe?
Where's the documentation on this?
Can't find anything like it in the pure-ftp docs at any rate.
 

Convergence

Member
Oct 8, 2006
7
0
151
Greetings all!

Here is what I would like to setup -

Am leasing a shopping cart service - we provide the templates, cart, ssl cert, etc - the user ONLY needs access to email in cpanel (mail only theme/s).

I do not want them to be able access to their account's main ftp - for obvious reasons. However, I do need to be able to setup ftp to 1 or 2 specific directories ONLY (for uploading their own images). To top things off - WE need access to their main ftp via root or, preferably, another employee login to manage their site.

Any suggestions?
 

david364

Active Member
Sep 15, 2013
43
5
58
cPanel Access Level
Reseller Owner
Convergence, I am sorry you have received no answer in eleven years! The answer is to disable FTP and use sFTP or one of the file managers yourself to access files through the root account. Unfortunately, cPanel appears to refuse to be fully secure, but some solutions for disabling FTP are at New Account whitout FTP access .
 

keat63

Well-Known Member
Nov 20, 2014
1,933
268
113
cPanel Access Level
Root Administrator
If you want to block all ftp access, then using Host Access Control is the key.

In the deamon box enter ftp.
in the next box enter ALL
in the nesxt box enter DENY

Now no one can FTP in to the server.

If you wish to allow yourself FTP access, create a new entry

FTP > Your IP > Allow

Just ensure that any allow rules are after any deny rules.
 

Attachments

  • Like
Reactions: Jelf