Allow access to FileZilla SFTP server through FTP subdomain and no other domains

Question

I've installed FileZilla Pro Server on a VPS server, and have it working with SFTP.

At first, I just used the IP address to access the server, but I've since added an ftp.domain.com subdomain to my VPS. This is also working fine.

However, if instead of ftp.domain.com, I use any other domain or subdomain hosted on my server, that also works!

Is there any way to restrict SFTP access to only use ftp.domain.com? And to reject all other domains and subdomains?

Note: There is one IP address for the entire VPS server and adding additional IP addresses isn't an option in the immediate future.

Does this answer your question? Do the SSH or FTP protocols tell the server to which domain I am trying to connect? — Martin Prikryl, Commented Nov 28, 2022 at 22:09
filezillapro.com/docs/server/filezilla-pro-enterprise-server/… Sounds like a messy question with a messy product site. Request edits to remove both ftp and iis tags. — Lex Li, Commented Nov 29, 2022 at 7:06
Did you possibly only consider IPv4 addresses when you determined adding one is not an option? You might have something like 18446744073709552000 unused addresses ready to use, and not need the other kind. — anx, Commented Dec 7, 2022 at 7:53
@anx: I don't follow you. It's a VPS server and the host is currently providing exactly one IP address. — Jonathan Wood, Commented Dec 7, 2022 at 15:52

Tero Kilkanen · Accepted Answer · 2022-11-28 22:02:56Z

2

SSH / SFTP does not have concept of virtual hosts in the way http / https protocols have.

Therefore the answer is no. You need to have a separate IP address to limit access.

answered Nov 28, 2022 at 22:02

Tero Kilkanen

37.8k3 gold badges43 silver badges65 bronze badges

Add a comment |

1 Answer 1