D-Link DNS-323 NAS Device

Jan 12, 2006
67
0
0
I have a D-Link DNS-323 Network Attached Storage Device on my network. Overall, I am very pleased with its performance. I have really only one issue right now I am trying to resolve. I am thinking that it has to be fixed in a firmware upgrade, but I am not 100% certain.

In short, it has a built in FTP server. I have two Seagate 7200.10 500 Gig drives in a RAID1 array, and there is a folder named FTP off of the ROOT on that array. I have it set so that FTP users are granted access (read only at this point) to ONLY that folder. I also have a single user with read/write access. I have tested this from work, going through my router.

When logging into the server through a command prompt, it works flawlessly. No username/password, no access..... when you use a username/password, you see exactly what you are supposed to, nothing more. (it seems, anyways).. While typing, I tried to use command prompt to login as anonymous with no password, and AGAIN got read access to ROOT... grrrr

If I login via browswer using ftp://<login>:<password>@<ftpserveripaddress>:<port>, AGAIN, all is good with the server.

If I login through a browser ONLY using ftp://<ftpserveripaddress> then the browser automatically gets access with anonymous, and gets read access to ROOT. It reports the following at the top of the page:
Connected to server. Logging in...
220 NAS FTP server (Version wu-2.6.2(52) Wed Dec 6 20:13:20 CST 2006) ready.
331 Guest login ok, send your complete e-mail address as password.

Is there a way to FORCE a user to login, and have NOTHING show up with user anonymous... There is NOTHING in the config about giving default read only access to ROOT or anything of that sort.

I was told by a friend at work that they are likely using Apache as a web server, and it allows by default dir listings by anonymous or something of the sort, and a file name httpd/conf needs to be edited. Is there a 'backdoor' or 'superadmin' account that might allow access to see the system files which need to be edited? He said that I could compile my own firmware with the GPL stuff on the D-Link webpage, but I have absolutly no clue with how to do that, and wouldn't want to try to piece one together....
<a target=_blank class=ftalternatingbarlinklarge href="ftp://ftp.dlink.com/GPL/DNS-323/">ftp://ftp.dlink.com/GPL/DNS-323/</a>

Anyone have any ideas?