What's a good port to hide ftp at?

[reicherb]

My isp blocks port 21 as most do. I want to give myself ftp access to my files when I'm away. What ports might I try that my ISP hopefully won't catch?

Thanks for all the help.

 

[Poontos]

What FTP server software are you running?

 

[reicherb]

wu-ftp on that BSD box we were just talking about.

 

[n0cmonkey]

<< My isp blocks port 21 as most do. I want to give myself ftp access to my files when I'm away. What ports might I try that my ISP hopefully won't catch?

Thanks for all the help. >>



scp at port 22. Totally eliminates need for ftp Need windows versions? I know a couple.

 

[Poontos]

Jezz...

go to /etc/services

See what ports available

 

[reicherb]

<< scp at port 22. Totally eliminates need for ftp Need windows versions? I know a couple. >>



What is scp? can you be more specific?

Thanks.

 

[reicherb]

I know what is available, but I want to use something that maybe my isp won't be monitoring.

 

[Poontos]

Yah good thinkin Secure Copy... scp

man scp

 

[n0cmonkey]

<<

<< scp at port 22. Totally eliminates need for ftp Need windows versions? I know a couple. >>



What is scp? can you be more specific?

Thanks. >>



scp= secure copy. It will pass everything through an excrypted tunnel. This way your password is much harder to sniff. Not to mention the OpenSSH programmers kick ass. Check out OpenSSH for more info. I do not believe there is a windows version there but they may have links. If not I can hook you up (with a little searching, but I basically know where to look )

 

[reicherb]

n0cmonkey:

It looks like that would need it's own client. I want something that I can use from someone elses computer. For example I am fixing there PC and I need a drive that I have on my PC.

 

[Poontos]

Just for reference, if you are transferring from the FreeBSD server to another:

scp username@myothermachine:source/directory/on/other/machine myfile

e.g.:

scp localfile bob@shittyserver.jackass.com:/home/joey

(file from local system) username@remotehost:remote/dir

 

[n0cmonkey]

<< I know what is available, but I want to use something that maybe my isp won't be monitoring. >>



My isp does not block port 22. I dont think they block anything (havent really tried). You can set ssh to sit on any port really. What operating system are you using? You mention a BSD, is it FreeBSD? They have a port of ssh (although it was an old version last time I checked).

 

[Poontos]

He is running FreeBSD 4.0.

 

[HansXP]

What's hard about this? He wants to use FTP so that he can go to someone else's computer - someone running Windows, or Mac OS, or whatever - and get access to his files. With SCP he would need to download a client on each machine, with FTP he wouldn't.

 

[HansXP]

BTW- I'd suggest Port 80. HTTP is rarely, if ever blocked.

 

[Poontos]

Yah.. who suggested all this SCP stuff. Jeezz..

Can you change the port in wu_ftpd? I can`t remember. Anyway, try what Hanz suggested. If that don`t work, look in /etc/services to see some free IP's.

 

[n0cmonkey]

<< What's hard about this? He wants to use FTP so that he can go to someone else's computer - someone running Windows, or Mac OS, or whatever - and get access to his files. With SCP he would need to download a client on each machine, with FTP he wouldn't. >>



Yeah I recommend wu-ftp. No security problems anywhere. Windows, Mac OS, and whatever all have ports of ssh and scp. If you are using anything less for anything except anonymous ftp you are a moron.

 

[reicherb]

The problem is that my ISP @Home is very strict about blocking servers. They have port 21 blocked and whatever ports mail is on (25? and 110?). I assume they would have 80 as well. I have seen many open ports in /etc/services. I was just wondering if anybody knew a good port that could be used as ftp that my isp would see as someithng else.

 

[Ladi]

Give a shot at using some of the higher numbered ports (above 1024).

~Ladi

 

[Poontos]

Don`t they do a scan, anyway? As long as it temporary, I guess.

 

[ScottMac]

Jeez...I was hopeing someone else would point this out.....

If &quot;we&quot; told you a great place to hide an FTP port....it wouldn't be much of a good place to hide it anymore, would it? It'd be kinda like &quot;Just between me &amp; you (and umpty-squat zillion other users...some of which can't keep a secret.......)&quot;

Pick a number, any number. A decent scanner is going to find it....

FWIW

Scott

 

[n0cmonkey]

<< Jeez...I was hopeing someone else would point this out.....

If &quot;we&quot; told you a great place to hide an FTP port....it wouldn't be much of a good place to hide it anymore, would it? It'd be kinda like &quot;Just between me &amp; you (and umpty-squat zillion other users...some of which can't keep a secret.......)&quot;

Pick a number, any number. A decent scanner is going to find it....

FWIW

Scott >>



If @home is scanning ports, just block off the @home ip that is scanning would solve the problem. If the ports are blocked by @home the problem is different. Just try a port >1024 and you should be ok

 

[konichiwa]

Try any of the ports above 1024. Something like 60388. Then use ZoneAlarm or other hardware/software firewall to block the IP that @home scans from.

 

[Schlocemus]

I agree with konichiwa

 

[n0cmonkey]

<< Try any of the ports above 1024. Something like 60388. Then use ZoneAlarm or other hardware/software firewall to block the IP that @home scans from. >>



zone alarm works on BSD?