• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

any secure ftp server to encrypt passwords?

W

wuboy

Member

ok... so far this one is a little mind boggling.

i'm looking for a linux flavor of the description that i am about to give.

as you know, most ftp servers do not encrypt passwords and send plaintext passwords through the port.
what i am looking for is a way to encrypt these usernames and passwords through any means...

i have looked into running ftp over ssh2, but this seems like you'd need to run sftp-server on the ftp server. this is a good idea, but does anyone know how to do this? i havent really looked into yet, but i have glanced at it...
the other way is using something called secure ftp wrappers... i downloaded this and havent figured out how to use this either. it claims to encrypt your information based on a current ftp server daemon running... it is java based. however, when i run the program, im not really sure what it does to encrypt the password. you can find more infomation about it at http://www.glub.com.

otherwise, is there any way to encrypt the passwords? ive sniffed on the server and found plaintext passwords laid out right there for any hacker to see. so i'm sure that there must be a way to prevent this.

thanks.
 
FTP is not secure, no matter how you do it. You need to run either sftp or ftp over ssl (with something like stunnel), both of which require special ftp clients.
 
n0cmonkey,

thanks for ur links.

i know about these, but i dont think i'll be able to use them.
unless...

do u know of any windows-based sftp clients?

right now the server works if the client uses the normal cuteFTP or ws_ftp program.

ideally, i just want something that will encrypt the passwords of my current server setup.

but if i have to use sftp-server, then maybe that's the way i'll have to go.

also, n0cmonkey... when users log into sftp... are they using port 22 like ssh? or 21 like ftp? additionally, are they chrooted, or do they have access to the entire filesystem?

thanks =)
 


<< do u know of any windows-based sftp clients? >>



Nope sorry. Visit google 😉



<< also, n0cmonkey... when users log into sftp... are they using port 22 like ssh? or 21 like ftp? additionally, are they chrooted, or do they have access to the entire filesystem? >>



Never used it so I dont know for sure.

 
You must log in or register to reply here.

TRENDING THREADS

Back
Top