RickV Member Licensed User Longtime User May 7, 2024 #1 After implementing my ftp server and opening a few ports on the network firewall, I have noticed what seems to be a few requests to use my server as a hop.... Is there any security issues I should know about? I have set usernames and passwords, quite lengthy and unmeaningful really and know that a connect from windows pops up a username and password dialogue box and a ftp client well you need to enter these credentials before hitting the connect button. Code: FTPSer.AddUser("mmftp4dataC0nn3ct","pa55w0rd.Sf0rC0nn3ct.") Logs Code: Number of clients: 0 client: CONNECT www.google.com:443 HTTP/1.1 client: Host: www.google.com:443 client: User-Agent: Go-http-client/1.1 client: terminated Number of clients: 0
After implementing my ftp server and opening a few ports on the network firewall, I have noticed what seems to be a few requests to use my server as a hop.... Is there any security issues I should know about? I have set usernames and passwords, quite lengthy and unmeaningful really and know that a connect from windows pops up a username and password dialogue box and a ftp client well you need to enter these credentials before hitting the connect button. Code: FTPSer.AddUser("mmftp4dataC0nn3ct","pa55w0rd.Sf0rC0nn3ct.") Logs Code: Number of clients: 0 client: CONNECT www.google.com:443 HTTP/1.1 client: Host: www.google.com:443 client: User-Agent: Go-http-client/1.1 client: terminated Number of clients: 0
Erel B4X founder Staff member Licensed User Longtime User May 7, 2024 #2 Security is an endless race. A simple measure that can help block such attempts is to configure the firewall and limit access to specific ips or countries (if possible). Upvote 0
Security is an endless race. A simple measure that can help block such attempts is to configure the firewall and limit access to specific ips or countries (if possible).
MicroDrie Well-Known Member Licensed User Longtime User May 12, 2024 #3 Old School security wisdom was based on you know what (username and password) and you have some of yours like the data in a cookie. You must realize that this method only protects against unauthorized access by third parties. It is important that you close your FTP server environment very tightly and that all OS and FTP server environment updates are always protected with the latest security fixes. Upvote 0
Old School security wisdom was based on you know what (username and password) and you have some of yours like the data in a cookie. You must realize that this method only protects against unauthorized access by third parties. It is important that you close your FTP server environment very tightly and that all OS and FTP server environment updates are always protected with the latest security fixes.
