more FTP suggestions

[ikeke]

Hello

I contacted the support yesterday and they told me they have no news about FTP enhancements.
I hope they won't let the FTP in such a basic state but i'm afraid because, the topic exists for more than a year and nothing new...

Franklin, do you have any informations about FTP issue or do you know if it's possible to manualy configure the FTP server ?

[Toxic]

yeah i'd like to see some more options for configuration on this as well. has anyone looked at the source code? it looks like some settings are set when it is compiled.

[ikeke]

it looks like some settings are set when it is compiled.

Too bad it's not using a config file

[momo]

it looks like some settings are set when it is compiled.

Too bad it's not using a config file

Hi there,
for sure. The only config file that ftpd is able to read is smb.conf.
Try a strace on ftpd process during connection and you will see that.

[dguido]

I know this probably won't happen, but I'd like to see Synology stop using a custom FTP server and instead use something more standardized like ProFTPD or vsftpd. Either would be more configurable (read: more features) and more secure.

[dguido]

- limit the number of login retries and if this limit is exceeded a timeout should occur

We have FTP Auto-block? After six attempts, the DS will ban that particular IP address.

Can I change this? I know this is odd coming from me, but I'd like to turn this off. Can I do that? I haven't looked very hard but it looks like it's set at compile time and isn't configurable after that.

[HarryPotter]

you can disable autoblock on the same page where you enable and configure the ftp service

[dguido]

you can disable autoblock on the same page where you enable and configure the ftp service

Hmm, I'm actually still running into denial of service issues with that turned off. I think I'm hitting the connection limit on the ftp server. "530 connections limit reached" if I remember correctly. I'll keep messing around.

[ikeke]

I know this probably won't happen, but I'd like to see Synology stop using a custom FTP server and instead use something more standardized like ProFTPD or vsftpd. Either would be more configurable (read: more features) and more secure.

Same thing for me. But unfortunatly it seems that Synology doesn't care about FTP issue, any time i ask for information about FTP improvement support always answers me "We have no information"... For me a "no information" often means "we don't work on it"

[ProfShot]

Hello guys

I was thinking about this option. If you make an account for an user, you´re not sure he only use it for himself. Because you can login from any computer so you can give the login details to other people. So if there was an option you can choose an user must login with a kind of secure ip. So he only can login on the ftp service with his own ip. And that ip you can save in the ftp service.So you´re sure there is only one user using his account, because you can´t login from another place.

[neverpleat]

Hey

I have now for 3 weeks a ds107+ and it's great but there is one thing i realy missing.
it's asked so many times and i ask it too.

please give us
standard sftp root access

even when you do it like telnet or ssh it would by nice to have sftp root

t'hanks
sorry for my bad english

[Ooook]

Suggestions:
- limit the number of login retries and if this limit is exceeded a timeout should occur
- configurable IP ranges should be blocked in general from accessing the diskstation (a kind of blacklisting)

+1 to these feature requests
- The number of retries is 6, but 3 should be enough.
- And blacklist IP range is a must-have.

[hjkiddk]

The only feature i miss is a "whitelist" of trusted IP's.

Althuogh being able to block all ip's from certain countries wold be nice to...

[stof7]

I've been reading the whole topic,

to sum up, there have been some improvements, like :

choices of ports, of passive ports too, ssl/tls option, automatic bloc ip.

But honestly, I don't think this is enough, we need the same as any good AND "normal" ftp server options & parameters, like softwares do (ServU, GuildFTP etc...).

Synology team, you can / have to do better, to not let us regret our / your products.

Hopefully, I didn't buy my DS207+ only for FTP purposes because if it was the case, I would have exchange it for another one which meets the normal Ftp use.

BTW, don't forget some VERY DETAILED customised LOG files, it's been mentionned several times in this topic.

Thanks for reading me & hopfully make it happen in a not too long future.

[Lord KiRon]

Why FTP needs additional ports ?
Pasive or not it uses additional ports other then 21. So if this ports are not properly forwarded (and I hate to forward ranges even trigger based) - clients can't connect.