Subject: Anonymous passwords

From: [email-masked] (Bill Campbell)
Date: Sat, 1 Jun 1996 16:14:09 -0700 (PDT)

I've just spent the morning going through the xferlog looking at the
passwords supplied on our system for the last month, and find a huge
number that are still set to the defaults mozilla@, WWWuser@ and
Netscape@.

I'm tempted to reject these passwords for anon-ftp as well as any that
I can identify as ftp-mail requests.  IMHO, anybody who wants to get
stuff from us for free can at least configure their software with a
real e-mail address, and I have very strong objections to e-mailing
large files.

Am I just being a crusy old curmudgeon or are there others who would
like to see an option to wu-ftpd to be able to specify invalid
passwords.

On a related note, I see a lot of [email-masked] entries.  Is
this some kind of automatic file grabber?

Bill
--
INTERNET:   [email-masked]  Bill Campbell; Celestial Systems, Inc.
UUCP:               camco!bill  PO Box 820; 2835 82nd Avenue S.E. S-100
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation.
		-- Johnny Hart

---

From: Mark Flatford <[email-masked]>
Date: Mon, 03 Jun 1996 06:53:55 -0400

At 07:02 PM 6/2/96 -0700, Robert Chea wrote:
>>You could just as easily do it the other way -- route all your file downloads
>>through an HTTP server.  I personally have my system set up so that the FTP
>>drive is mounted in to the web space so that useres can access it either way.
>>I figure it is more efficient if the guy is already on the web server to pull
>>the files from the web server rather than opening up a new FTP connection.
>>
>
>Evan,
>
>How do you allow everything to be downloaded through HTTP?  When I upload a
>binary like a photoshop file and then I make an HTTP reference to it, I
>just get gibberish when I click on the link.  How do I make it
>automatically download to a file (like FTP does) ?  If I use an ending like
>.hqx or .zip, it will work, but is there a better way to do this so that
>people who haven't mapped these suffixes on their browsers can still
>download the file?

Robert,

It's actually a mime type on the server, which allows for this.

If mime types are set up as in Netscapes servers...Then you just add that as
a mime type. A one line entry to a mime.types file in the server area does
the trick.

Mark

>
>Robert Chea
>
>
>
>>Evan
>>--
>>Evan Champion            * Director, Network Operations
>>mailto:[email-masked] * Directeur, Exploitation du reseau
>>http://www.synapse.net/  * Synapse Internet
>
>Robert S. Chea
>Director of Information Systems
>Cedro Group Inc.
>
>
>
>
Mark A. Flatford
[email-masked]
flatford @usit.net
US Internet