Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: RE: Secure FTP

RE: Secure FTP

From: Scott, Richard <Richard.Scott_at_BestBuy.com>
Date: Wed, 14 Jan 2004 13:06:14 -0600

As far as I know - generic port forwarding does not encrypt the data
channel, but it can be configured such that the Data channel is
forwarded through the SSH tunnel. The only exception to this would be
if the SSH server were not to be on the same physcial machine as an FTP
server.

Assume this is correct, comments?

Cheers,
R.

<Cut>
FTP through ssh is only able to secure the control channel and does not
protect the data channel.
Better methods of file transfer over ssh are sftp, scp or rsync. If you
want to use the FTP protocol and need it secure look at TLS FTP
<Snip>
Received on Jan 14 2004

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]