site to site transfer to glftpd

InvisiGod · 08-04-2005, 03:38 PM

Hi there,

I have got a slight problem with site to secure site transfers to glftpd. Does ioftpd not support site to site transfers to gl or is something wrong with my settings. I have already used the search funktion of the forum, but haven't found anything adequate.
Thanks very much for your help in advance.

Cheers

InvisiGod

darkone · 08-04-2005, 03:49 PM

io 1.0 will support secure site to site transfers. Because of known (?) security issue in current implementation, I never bothered to implement it. Also notice that PASSIVE mode SSL transfers are also vulnerable. Always prefer to use ACTIVE mode when possible. This applies to all daemons, and all implementations. Certificate based authentication on both control channel and data channel is a MUST for secure passive mode transfers.

InvisiGod · 08-04-2005, 03:52 PM

so it is not possible with io 5.xx, right?

darkone · 08-04-2005, 03:54 PM

Should be possible, if you use altenrative mode site to site transfer (or what it was called in FFXP settings) io 5.x doesn't support CPSV/SSCN which is required to initiate SSL connection.

InvisiGod · 08-04-2005, 04:01 PM

k, I see. Thanks a lot and sorry for bothering you.

When do you think io 1.0 willn approximatley be ready?

InvisiGod · 08-04-2005, 04:14 PM

hmm, just tested the alternative mode. FXPing from io to gl now works fine, however gl to io doesn't work.

[L] TYPE I
[L] 200 Type set to I.
[R] CPSV
[R] 500 'CPSV': Command not understood
Secure site to site transfers not supported by this ftp server
[R] Transfer Failed!
1 File failed to transfer
Server Error, Aborted

darkone · 08-04-2005, 05:54 PM

If I remember correctly, you can set it so that io-side of connection will be always using active mode.

InvisiGod · 08-05-2005, 02:46 AM

I played a lil bit with the flashfxp settings, but it doesn't work.

richto · 08-31-2005, 09:51 AM

Hi,

Are existing licensed ioftpd users covered for free for the 1.0 upgrade or is it chargeable. If so how much?

Is there a beta program?

Darkone are you now a shareholder in Inicom? ie if I buy a Flash license does it benefit you?

Finally, why not call it FlashFTPD....as I see you already have the domain name...