[webmasters] web01 downtime Feb 26
BigBiz.com Tech Support (info@bigbiz.com)
Mon, 26 Feb 2001 10:37:46 -0800 (PST)
Server 1 was down for several hours this morning. The problem was traced
to a customers open directory in anonymous ftp, which allowed hackers to
log in and upload illegal files for distribution (typically pirated
software and media files), thereby using up all disk space. The directory
has been removed.
We will now actively scan the anonymous ftp area for open directories
and remove them without warning. Hackers have automated scanning programs
that seek out these open directories to take advantage of. We request
all users to not use open anonymous ftp directories - typically for uploading.
Please find an alternative way to do anonymous uploads, such as http
or the secure anonymous ftp upload described in
http://www.bigbiz.com/bigbiz/anonymous_ftp_upload.html
Anonymous ftp is an old protocol we are planning to
drop for various reasons, including
* poor security
* inefficient as compared to http
* requires its own IP address, not scaleable for the current Internet
We ask users to migrate away from depending on anomymous ftp.
Most customers DO NOT use anonymous ftp - therefore are not affected.
You are NOT affected if you dont put files in the pub folder.