Yes, this should be possible, but I have another question (also). Would it
make more sense to have two different IP addresses rather than two
different ports? Ports are probably more confusing to casual users, and
ports also tend to have more firewall-related blockages. Plus, it sounds
like you're doing this for phase-in/phase-out reasons (shifting unencrypted
FTP to TLS-encrypted FTP), and while I suppose you could freeze the port
numbers "forever," it'd probably be more graceful to use IP addresses.

For example, you could create:

newftp.mycompany.com

with TLS FTP service and tell users to start using it as step 1. Then,
later, you could announce the phase-out of ftp.mycompany.com by a certain
date. Finally, you phase out ftp.mycompany.com, but you keep both names
aliased in your DNS and pointing to the single numeric that was always
associated with newftp.mycompany.com.

Anyway, do all that and it only requires one end user change, and it's a
simpler change for them to understand and do (the IP address rather than
the port).

And no, I'm not a big fan of FTP either, especially if you're using it for
application integration. File transfer is copying, with all the possible
disadvantages associated with copying. So it's always a good idea to at
least contemplate the question, "why am I copying?" and whether you can
provide alternative, on-line access. (You almost always can.)

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Based in Tokyo, Serving IBM Japan / Asia-Pacific
E-Mail: [email protected]
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to