> Is there a place in proftpd to put a banner that will tell the user if
> their directory doesn't exist? Right now it just fails their login.

No. Any information reported back to client (missing directory, wrong
password, locked account, etc) can be used as an "information leak"
attack, letting attackers gather information about which usernames are
valid (and other knowledge about your system) remotely. For this reason,
proftpd reports nothing other than "Login failed" to the client.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Read not to contradict and confute, nor to believe and take for granted, nor
to find talk and discourse, but to weigh and consider.

-Francis Bacon

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
ProFTPD Users List
Unsubscribe problems?