Tag Info

Hot answers tagged

11

I'm not sure there's an objective answer to this. It depends entirely on such factors as what's on the file server, what your business is, whether the usernames and passwords are used elsewhere (ftp transmits credentials plaintext), whether you're subject to any type of legislation that requires greater cautiousness (HIPAA, FERPA, PCI), etc. That said, ...


6

Short answer: disable it. Longer answer: it depends on the level of risk that you're comfortable with. There may be exploits that work against the version of the software you're using, or that haven't been discovered yet, that could allow unauthorized access. It's up to you how much risk you are willing to take: if you're happy that the monitoring is good ...


2

I can successfuly list the directories, but when I try to upload a file ... it hangs for about 20 seconds ... and then throws a timeout. Directory listing and file transfer use the same basic mechanism, that is both open a data connection and transfer data. In your case the clients opens a connection to the address specified by the server within the ...


2

With passive FTP both the control connection (by default on port 21) and the data connection (to the PASV port indicated by the FTP server) are both initiated by the FTP client. Typically firewalls that allow their users to set up a FTP connection to a remote server will also allow the client to establish that associated data connection. Many larger sites ...


1

The risk is always there when servers are public facing, another way to lessen the risk a bit is to run the service at a non standard port, say 8021. Do you have the option of doing that ?


1

If it is just read permissions, I can't think of any important risk but you may want to make sure you are using the latest/safest FTP server software to be on the safer side. You may want to create a script on your desktop to enable/disable the account from your desktop.


1

I did this, i don't know if this is the more clearly way to that. #! /usr/bin/perl -w use Net::FTP; open(TMPOUT, ">>","/tmp/tmpout.txt"); *STDOUT = *TMPOUT; ### Redirect STDOUT to /tmp/tmpout.txt #select TMPOUT; my ($ftp, $host, $user, $pass, $dir, $fpath); $host = "localhost"; $user = "myftpuser"; $pass = "myftppassword"; $dir = "/tmp"; $ftp = ...


1

grep -r 'some sting' /somedir | ssh user@host "dd of=outputfile" That might do the trick, if you can use ssh in stead of ftp.


1

Firstly you may want to test not using passive mode, just in case your whole setup works with it. Secondly, have a look at this line: Response: 227 Entering Passive Mode (88,150,168,207,155,25). That's the IP address of the VPS plus two more numbers, let's call them p1 and p2. These numbers are telling you the port where you should be connecting to, by ...


1

Looks at first glance as a NAT issue with the FTP protocol helper failing because of the TLS encryption and I would expect that to become a firewall problem as well. Some background here in an older answer of mine. The solution is probably to fix the passive TCP port range that FTP over SSL can use, have the FTP server advertise the external IP-address ...


1

Isn't the answer likely to be simpler that that? I'd assume that the home directory for that user has been defined as /home/userdir/ in /etc/passwd (or the equivalent database) instead of /home/userdir


1

1) I'm pretty sure there isn't any pre-available automatic way to achieve this. One day AWS Lambda will probably be capable, when it is taught how to receive an event after the RDS backup has occurred. 2) I think you've misunderstood what the RDS backups do. They actually take a snapshot of the RDS instance (i.e. the hidden EC2 instance on which the RDS ...


1

I was having this issue as well and it was related to the data ports being selected by IIS. I set it up to use a specific port range but when my client tried to use passive mode it showed that it was using the wrong port. This article describes the method for calculating which port it is using. e.g. 227 Entering Passive Mode (x1,x2,x3,x4,y1,y2) The IP ...



Only top voted, non community-wiki answers of a minimum length are eligible