North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: FTP with authentication to RADIUS

  • From: Andrew Brown
  • Date: Fri Jan 05 10:31:12 2001

>1) many versions of FTP make you system vulnerable to root cracks.

...which are problems that need to be fixed.  if you know of any...

>2) There is NO way to run FTP in a SSH tunnel because it uses dynamic port
>assignments.

well...that's not entirely true.  you can tunnel the command channel,
just not the data channel.

>3) FTP logins are plain-text.

sure, which is why you tunnel them via ssh, or use ipsec.
actually...if you use ipsec, you can get the data protected as well.

>For sharing files, with anonymous users, HTTP is much better (see:
>http://files.dnso.net)

for sharing files with anonymous users, i'll always be using anonftp.

-- 
|-----< "CODE WARRIOR" >-----|
[email protected]             * "ah!  i see you have the internet
[email protected] (Andrew Brown)                that goes *ping*!"
[email protected]       * "information is power -- share the wealth."