the most secure ftp server today?

danish · External Since: Feb 06, 2006 Posts: 107

HI All,
I wanted to know which ftp server is the most secure?? Although, Im
googling around, but I would like to hear your opinions too..

Thanks
Danish

John Hasler · External Since: Mar 25, 2004 Posts: 1337

danish wrote:
> HI All, I wanted to know which ftp server is the most secure?

Secure against what threat?
--
John Hasler
john.DeleteThis@dhh.gt.org
Dancing Horse Hill
Elmwood, WI USA

Jeroen Geilman · External Since: May 02, 2005 Posts: 68

On Fri, 17 Nov 2006 07:24:00 -0800, danish wrote:

> HI All,
> I wanted to know which ftp server is the most secure?? Although, Im
> googling around, but I would like to hear your opinions too..

Literally speaking ?
The one that's not running.

Straight FTP is, by nature, quite insecure, since neither the
authentication nor the traffic are in any way encrypted.

If you must, look into vsftpd - I gather it's one of the best.

Better use SCP or SFTP instead, though.

(SCP runs through any standard SSH daemon, and has a very good Windows
client as well.)

J.

Tauno Voipio · External Since: Oct 21, 2005 Posts: 388

danish wrote:
> HI All,
> I wanted to know which ftp server is the most secure?? Although, Im
> googling around, but I would like to hear your opinions too..
>
> Thanks
> Danish

If you need security, forget FTP, use scp (part of SSH) instead.

--

Tauno Voipio
tauno voipio (at) iki fi

danish · External Since: Feb 06, 2006 Posts: 107

Tauno Voipio wrote:
> danish wrote:
> > HI All,
> > I wanted to know which ftp server is the most secure?? Although, Im
> > googling around, but I would like to hear your opinions too..
> >
> > Thanks
> > Danish
>
>
> If you need security, forget FTP, use scp (part of SSH) instead.
>
> --
>
> Tauno Voipio
> tauno voipio (at) iki fi

what about ftps:// using the browser..

Like https:// . Isnt there a protocol called ftps://. From what I
remember, it uses the port 990 and 995 I guess. I was wondering if I
could set up a ftp server where in I can connect by giving the url
ftps://x.x.x.x:990..and once the ftp server is contacted, a certificate
is thrown, from a CA, showing that data communication is encrytped..

Danish

ynotssor · External Since: May 06, 2005 Posts: 618

In news:1163919125.636560.61590@m73g2000cwd.googlegroups.com,
danish <me.linuxadmin.DeleteThis@gmail.com> wrote:

> what about ftps:// using the browser..
>
> Like https:// . Isnt there a protocol called ftps://. From what I
> remember, it uses the port 990 and 995 I guess.

Yes, you are indeed guessing:

$ egrep "ftps|990|995" /etc/services
pop3s 995/tcp # POP-3 over SSL
pop3s 995/udp # POP-3 over SSL

Unruh · External Since: May 27, 2005 Posts: 2213

"ynotssor" <ynotssor DeleteThis @example.net> writes:

>In news:1163919125.636560.61590@m73g2000cwd.googlegroups.com,
>danish <me.linuxadmin DeleteThis @gmail.com> wrote:

>> what about ftps:// using the browser..
>>
>> Like https:// . Isnt there a protocol called ftps://. From what I
>> remember, it uses the port 990 and 995 I guess.

>Yes, you are indeed guessing:

>$ egrep "ftps|990|995" /etc/services
>pop3s 995/tcp # POP-3 over SSL
>pop3s 995/udp # POP-3 over SSL

Of course had you searched a bit further

sftp 115/tcp
sftp 115/udp

ynotssor · External Since: May 06, 2005 Posts: 618

In news:ejp27f$sl3$1@aioe.server.aioe.org,
Unruh <unruh-spam.RemoveThis@physics.ubc.ca> wrote:

>>> what about ftps:// using the browser..
>>>
>>> Like https:// . Isnt there a protocol called ftps://. From what I
>>> remember, it uses the port 990 and 995 I guess.
>
>> Yes, you are indeed guessing:
>
>> $ egrep "ftps|990|995" /etc/services
>> pop3s 995/tcp # POP-3 over SSL
>> pop3s 995/udp # POP-3 over SSL
>
> Of course had you searched a bit further
>
> sftp 115/tcp
> sftp 115/udp

I'm very well aware of sftp. The exercise was for the benefit of the person
I was responding to, in order to help them learn to search before making
statements.

jscape · External Since: Dec 28, 2006 Posts: 2

Port 990 is typically used for implicit SSL for the FTP protocol. This
is different than explicit SSL which is typically run on the same port
as standard FTP (port 21) and allows you to switch from an unencrypted
session using the AUTH TLS or AUTH SSL commands.

Van Glass
JSCAPE
Managed File Transfer and Security Solutions
http://www.jscape.com/secureftpserver/

danish wrote:
> Tauno Voipio wrote:
> > danish wrote:
> > > HI All,
> > > I wanted to know which ftp server is the most secure?? Although, Im
> > > googling around, but I would like to hear your opinions too..
> > >
> > > Thanks
> > > Danish
> >
> >
> > If you need security, forget FTP, use scp (part of SSH) instead.
> >
> > --
> >
> > Tauno Voipio
> > tauno voipio (at) iki fi
>
> what about ftps:// using the browser..
>
> Like https:// . Isnt there a protocol called ftps://. From what I
> remember, it uses the port 990 and 995 I guess. I was wondering if I
> could set up a ftp server where in I can connect by giving the url
> ftps://x.x.x.x:990..and once the ftp server is contacted, a certificate
> is thrown, from a CA, showing that data communication is encrytped..
>
> Danish

danish · External Since: Feb 06, 2006 Posts: 107

jscape DeleteThis @gmail.com wrote:
> Port 990 is typically used for implicit SSL for the FTP protocol. This
> is different than explicit SSL which is typically run on the same port
> as standard FTP (port 21) and allows you to switch from an unencrypted
> session using the AUTH TLS or AUTH SSL commands.
>
> Van Glass
> JSCAPE
> Managed File Transfer and Security Solutions
> http://www.jscape.com/secureftpserver/
>
Thanks
Danish

> danish wrote:
> > Tauno Voipio wrote:
> > > danish wrote:
> > > > HI All,
> > > > I wanted to know which ftp server is the most secure?? Although, Im
> > > > googling around, but I would like to hear your opinions too..
> > > >
> > > > Thanks
> > > > Danish
> > >
> > >
> > > If you need security, forget FTP, use scp (part of SSH) instead.
> > >
> > > --
> > >
> > > Tauno Voipio
> > > tauno voipio (at) iki fi
> >
> > what about ftps:// using the browser..
> >
> > Like https:// . Isnt there a protocol called ftps://. From what I
> > remember, it uses the port 990 and 995 I guess. I was wondering if I
> > could set up a ftp server where in I can connect by giving the url
> > ftps://x.x.x.x:990..and once the ftp server is contacted, a certificate
> > is thrown, from a CA, showing that data communication is encrytped..
> >
> > Danish