Security Basics mailing list archives

Re: any ftp port redirector program?


From: krymson () gmail com
Date: 14 Dec 2006 21:15:29 -0000

Hopefully I am reading this right, but let me first start a response by being the evangelist.

1) Your best course of action is to change the firewall rules to allow your connection in/out. I'm not sure which way 
you are going here. If you don't control the firewall, you shouldn't be trying to circumvent it (university, corporate 
environment, etc).

2) Don't use FTP, use SFTP/SCP/SSH for file transfers. I say this just in case this is from your machine to your 
server. If you don't control all of it, ignore this. :)

Now into more meaty substance...

3) I prefer using PuTTY for port redirection. But be aware that if you are redirecting your machine's FTP client to be 
off port 21, you need to be connecting to something remote that can understand your connection or get you back to port 
21. For example, I can route my outbound FTP traffic using PuTTY from port 21 to port 80. But you need to have the 
server FTP listening on port 80, or something beyond the firewall that will accept that port 80 FTP connection, and 
proxy it over to port 21 again, and into the target server.

4) Typically, any SSH proxy tutorial or setup will be able to support FTP traffic. Most of those setups are 
traffic-independent, meaning you can proxy anything you want through it. Try Googling "SSH proxy tutorial" without the 
quotes, or perhaps even include FTP to see if you can get lucky.

I will say that if you are the FTP client and want to connect to an FTP server you do not own, you're going to need the 
FTP server owner to assist you, the firewall owner to allow you, or a buddy (third party) to act as the proxy.


<-snip->

I have used redir(http://anhedonia.sammy.net/~sammy/hacks/) for port 
redirector for security reason. So I can connect the ftp server only 
through redir installed server.
Because, firewall permit only by redir installed server.

But I'm afraid redir doesn't work well, so whenever I find the error, I 
should restart the process.

Is there any recommendable port redirector which supports ftp service?
I can find lots of programs, but most programs are not supported ftp 
service.
Surely, I know VPN is a best soluton, but I can't use VPN for some reason.

Thanks for your time..

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------


Current thread: