Re: [cobalt-users] ftp security

[Jim Dory <jdory@xxxxxxxxxxxxxx>]

Ligard, Vidar wrote:

> I would use your hardware firewall to block out all traffic to the ftp server from anybody, except the ip of the machine you use to upload the web content. If that machine is sitting on the private port of the firewall, outside hackers will not be able to sniff on the password which does get sent in open text like telnet. They will not be able to spoof your ip to get in either, as the firewall will detect that ip to not belong to the exterior port, and drop the packet. If your workstation is on the exterior, however, you might want to consider using some sort of secure ftp, as others would potentially be able to see your password.
>
> Vidar
>  
>
> >    

Thanks Vidar,

This sounds like the easiest way to get solid security. The hosts.deny 
solution suggested by Dave sounds like the first thing I should do 
anyway. I may have to go with the SSL version of proftp though because 
we occasionally have a web designer do some work from outside. She could 
always just email me the pages I suppose, but would be nice to give her 
ftp access to help with directory cleanup, etc. I've pretty much had her 
cut off from ftp since I started learning more about security.

--
Jim D.