FTP ports

[karthikbalaguru]

Hi,

In the below link, i find ways to block FTP access and Enable FTP access by an admin.

[webmasterworld.com...]

But, i would also like to know, what are the possible ways by which an user will be able to log into
those Blocked sites?
And what are the ways to prevent them from doing it?

Thx in advance,
karthik bala guru

[StupidScript]

If the FTP site has been protected by even a few of the suggestions in that thread, then any attempts to get around those protections would be called a "hack" ... in other words, it would be against the admin's wishes and would undoubtedly be illegal.

[TheGrid]

If you are a admin, using ftp is not safe as the data can be read. Your admin userid and password itself can be read on the network.

Shutdown ftp port itself and use secure ftp.

[jtara]

Shutdown ftp port itself and use secure ftp.

Here's a bit more information for you.

sFTP, or "Secure FTP" really isn't FTP. The name is a bit of a misnomer.

It's the file-transfer capability built-in to SSH servers. So, if you are running SSH, you have sFTP.

Many newer FTP clients for Windows support sFTP. If the one you are using doesn't, look around for one that does. The terminology can be confusing, as there is also FTP over SSL. This is over SSH, and isn't really FTP.

A number of standard Unix programs send passwords over the network "in the clear" and are best avoided. I've listed them below with their more-secure alternatives.

ftp - sftp (part of SSH servers)
telnet - ssh
pop - pop over SSL (typically on port 995)
smtp - smtp over SSL (typically on port 465)

Note that by default smtp doesn't require a user ID/password. But when it does, the user IDs and passwords are sent in the clear, unless configured to use SSL.