Turning off anonymous FTP access

[runestone]

Is there a way to turn off (or delete) the default anonymous FTP account(s)?

I can only seem to add new accounts via CPanel | Account Settings | FTP Manager | FTP Accounts

I've turned off anonymous uploading so not much can be done if anyone does log in, but I'd like to tighten the whole thing up so you can't even connect.

Apologies if I've missed something obvious

Thanks.

- runestone

[openbox]

If you go into "Anonymous FTP Controls" and uncheck allow anonymous ftp and allow anonymous uploads, you should be go to go.

[Andy]

cPanel Docs

http://www.cpanel.net/docs/cp/index.html

Removing Anonymous FTP

http://www.cpanel.net/docs/cp/removingAnonymousFTPaccess.htm

[runestone]

Thanks for both of your replies, Andy and openbox.

I'd previously played with the settings you have mentioned, and while I've been able to block uploads via anonymous FTP, I still can't block anonymous access altogether - even though the option...

"Allow anonymous access to ftp://ftp.<mydomain>.com/incoming/"

is ticked OFF.

It just doesn't make any difference whether it's ticked on OR off - I can still connect anonymously (eg. by typing ftp://ftp.mydomain.com into a browser)

Have I done something wrong in WebHost Manager when I initially set the account up?

Thanks again.

- runestone

[openbox]

Sure enough. Hmm, I guess I never really tested it before. At least it doesn't let you upload...but still kind of bad that it allows the connection.

[runestone]

So I guess that this is a genuine bug then?

[FirE-dRaGoN]

It's your domain hosted on a dedicated IP address?

If it is, this is really a cPanel bug.

If not, that's why you can't disable anonymous access at all, because the primary site hosted at that IP address has anonymous FTP access enabled and you can't do anything about that. This is normal on Dathorn servers.

BTW, try logging to your FTP as username "anonymous@yourdomain.com", if the login fails, it's because all your settings are OK, but they only applies to your "virtual" site.

[truth]

Hi,

I also experience same problem however I closed the Anonymous FTP Accounts from all of the accounts' cpanels. I even deleted the public_ftp folders from all of the accounts, but still I see "incoming" folders when I enter ftp.mydomain.com. Where is it directed to, if I deleted all public_ftp folders?