FTP Accounts Mysteriously Disappearing!

[revdave]

It appears that, at random times, ALL the user created FTP accounts randomly vanish from the CPanel 6 settings for no apparent reason. neither I, the reseller, nor the end user have made any changes or even accessed CPanel or the reseller panel WHM 7.4.2 either.

Of course this is a major problem and will drastically affect my customer Sales!

Alan, is currently unaware of a fix for this. Does anybody have any ideas how to stop this? Maybe this " bug " has been fixed in an update? How do I research this problem?

 

[mickeymouse]

Dear revdave,

Make sure that no one is doing changes from your side. This is not a bug,but seems to an attack from outside. Due to the nature of the protocol and the requirement for root level privileges this leaves ftp daemons open to attack. Simple steps which can be taken to tighten security include

1)Traffic filtering upstream of the server
2)chroot() all sessions
3)Don\'t give a valid shell where it\'s not needed
4)Run an intrusion detection system
5)Tripwire


Regards,