Re: FTP SSL

Ruud Baart <[email protected]>
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>
Thanks, I already thought that was the problem. But you never know ...


On 16-3-2022 17:36, Tuomo Soini wrote:
> On Wed, 16 Mar 2022 16:14:10 +0100
> Ruud Baart <[email protected]> wrote:
>
>> Hi,
>>
>> I can find quite a lot of documentation concerning a FTP server. But
>> I don't find the way to do it.
> There is no way to do FTP with TLS/SSL completely secure way. That is
> because conntrack module must be able to see data port in command packet
> to open data connection and because TLS encrypts command channel
> conntrack module can't handle it. That is why FTP has always been
> horrible option for data transfers with firewalling.
>
> FTP is dead - move to SFTP which uses ssh protocol.
>
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.