Re: FW: [expert] Telnet and FTP Combination

2000-03-08 Thread Charles Curley

On Tue, Mar 07, 2000 at 05:15:29PM -0700, Joe Sheble wrote:
- 
- Because when I ftp in I'm limited to a very restricted directory structure
- (that users home directory) and I move files back and forth between work and
- home... most of these files are in a directory not available to the user I
- log in as with FTP... they're root files (configuration files, etc... to
- work on, read, or study during idle times as well as share with
- co-workers)... so I have to telnet in as a regular user, do a 'su', copy the
- necessary files to the appropriate home directory logout of telnet, then
- re-connect with ftp to actually get the needed file.  It'd be much nicer to
- do this in one single connection.

In effect, what you are asking for is to be able to ftp in as root. As the
millipede said, crossing her legs, "No! No! A thousand times, no!". It is
hidiously insecure, which is why you cannot ftp or telnet in as root to
most systems.

The system you are complaining about at least requires the user (and a
potential cracker) to know two passwords and an account name. It's not
perfect, but it's a lot more secure than what you propose.


-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley



Re: FW: [expert] Telnet and FTP Combination

2000-03-08 Thread Lee


Charles Curley wrote:
On Tue, Mar 07, 2000 at 05:15:29PM -0700, Joe Sheble
wrote:
->
-> Because when I ftp in I'm limited to a very restricted directory
structure
-> (that users home directory) and I move files back and forth between
work and
-> home... most of these files are in a directory not available to
the user I
-> log in as with FTP... they're root files (configuration files, etc...
to
-> work on, read, or study during idle times as well as share with
-> co-workers)... so I have to telnet in as a regular user, do a 'su',
copy the
-> necessary files to the appropriate home directory logout of telnet,
then
-> re-connect with ftp to actually get the needed file. It'd
be much nicer to
-> do this in one single connection.
In effect, what you are asking for is to be able to ftp in as root.
As the
millipede said, crossing her legs, "No! No! A thousand times, no!".
It is
hidiously insecure, which is why you cannot ftp or telnet in as root
to
most systems.
The system you are complaining about at least requires the user (and
a
potential cracker) to know two passwords and an account name. It's
not
perfect, but it's a lot more secure than what you propose.
--

-- C^2
No windows were crashed in the making of this email.
Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley
Setting up FTP
FTP
This could not possible be easier.
First of all, when you initally install Linux, chose the Anonymous
ftp option.
NOw ,automatically, you have anonymous ftp site running on your linux
box.(as long as ftpd is running)
using a client to ftp using
username: anonymous
password :[EMAIL PROTECTED]
Whats that? you need to ftp as root ?
edit the /etc/ftpusers
Any user in this file is denied ftp access to this machine. Delete root,
and root can now ftp.
Allowing root ftp access from the outside is dangerious. Build a
new firewall rull to deny external ftp access

begin:vcard 
n:Binkley;Robert
x-mozilla-html:TRUE
org:;DCFS
adr:;;
version:2.1
email;internet:[EMAIL PROTECTED]
title:HP-ADMIN
x-mozilla-cpt:;6304
fn:Robert Binkley
end:vcard



FW: [expert] Telnet and FTP Combination

2000-03-07 Thread Mike Fieschko

 "Joe" == Joe Sheble [EMAIL PROTECTED] writes:

Joe Because when I ftp in I'm limited to a very restricted
Joe directory structure (that users home directory) and I move
Joe files back and forth between work and home... most of these
Joe files are in a directory not available to the user I log in
Joe as with FTP... they're root files (configuration files,
Joe etc... to work on, read, or study during idle times as well
Joe as share with co-workers)... so I have to telnet in as a
Joe regular user, do a 'su', copy the necessary files to the
Joe appropriate home directory logout of telnet, then re-connect
Joe with ftp to actually get the needed file.  It'd be much nicer
Joe to do this in one single connection.

It is nicer, much more convenient.  It is also a security nightmare.

There are excellent security reasons for running ftp in a chroot jail
("a very restricted directory structure"), and telnet and http and
bind and many other services ought to be chrooted as well.

Take this from someone who's week was spoiled by running an old bind
version at work and not chrooting it.  (We made the sans.org/giac.htm
list.)

Do you really want your box rooted?

(Views expressed != my employers.)

-- 
Mike Fieschko, West Orange, NJ, USA
X-Mailer: VM 6.75 under 21.1.8 XEmacs and random-sig.el
Kernel 2.2.15-5mdk
http://www.viconet.com/fieschko/home.htm
Mar 8 St John of God
"The Bible tells us to love our neighbors, and also to love our
enemies; probably because they are generally the same people." -
[G.K. Chesterton, in ILN, 7/16/10]



[expert] Telnet and FTP Combination

2000-03-07 Thread Joe Sheble

Does anybody know of an application that combines both the functionality of
a telnet server and an ftp server?  As well as offering a Linux based and
Windows version of the server and appropriate clients?

Joseph (Joe) Sheble
a.k.a. Wizaerd

Wizaerd's Realm
http://www.wizaerd.com
3D Art, ColdFusion, Illustration, Canvas
a little bit of everything...

ColdFusion Developer
iTOOL.com
http://www.itool.com
Come Build Your Site Today




Re: [expert] Telnet and FTP Combination

2000-03-07 Thread Jean-Michel Dault

On Tue, 7 Mar 2000, Joe Sheble wrote:

 Does anybody know of an application that combines both the functionality of
 a telnet server and an ftp server?  As well as offering a Linux based and
 Windows version of the server and appropriate clients?

Why do you need a combined application? There is the standard telnetd and
standard ftpd, and you can use the MS$ telnet client and ws_ftp/cute_ftp.

Jean-Michel Dault
[EMAIL PROTECTED]


 
 Joseph (Joe) Sheble
 a.k.a. Wizaerd
 
 Wizaerd's Realm
 http://www.wizaerd.com
 3D Art, ColdFusion, Illustration, Canvas
 a little bit of everything...
 
 ColdFusion Developer
 iTOOL.com
 http://www.itool.com
 Come Build Your Site Today
 
 



FW: [expert] Telnet and FTP Combination

2000-03-07 Thread Joe Sheble


Because when I ftp in I'm limited to a very restricted directory structure
(that users home directory) and I move files back and forth between work and
home... most of these files are in a directory not available to the user I
log in as with FTP... they're root files (configuration files, etc... to
work on, read, or study during idle times as well as share with
co-workers)... so I have to telnet in as a regular user, do a 'su', copy the
necessary files to the appropriate home directory logout of telnet, then
re-connect with ftp to actually get the needed file.  It'd be much nicer to
do this in one single connection.

-Original Message-
From: Jean-Michel Dault [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 07, 2000 5:26 PM
To: Joe Sheble
Cc: Expert Mandrake List
Subject: Re: [expert] Telnet and FTP Combination


On Tue, 7 Mar 2000, Joe Sheble wrote:

 Does anybody know of an application that combines both the functionality
of
 a telnet server and an ftp server?  As well as offering a Linux based and
 Windows version of the server and appropriate clients?

Why do you need a combined application? There is the standard telnetd and
standard ftpd, and you can use the MS$ telnet client and ws_ftp/cute_ftp.

Jean-Michel Dault
[EMAIL PROTECTED]



 Joseph (Joe) Sheble
 a.k.a. Wizaerd
 
 Wizaerd's Realm
 http://www.wizaerd.com
 3D Art, ColdFusion, Illustration, Canvas
 a little bit of everything...
 
 ColdFusion Developer
 iTOOL.com
 http://www.itool.com
 Come Build Your Site Today
 




Re: FW: [expert] Telnet and FTP Combination

2000-03-07 Thread Jean-Michel Dault


Get a Terminal program that does Z-modem (Comnet or CRT, you can get them
at any tucows mirror), and install the lszrz package.

Then, in telnet, type "sz file" and your terminal program will
receive it. If you want to send files to your linux box, type "rz", and
tell your terminal to send a file with Zmodem, and it will receive it.

It even works with HyperTerminal (with the TCP/IP option) except that when
it sends a file, it puts it in uppercase letters.

Jean-Michel Dault
[EMAIL PROTECTED]

On Tue, 7 Mar 2000, Joe Sheble wrote:

 Date: Tue, 7 Mar 2000 17:15:29 -0700
 From: Joe Sheble [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 To: Expert Mandrake List [EMAIL PROTECTED]
 Subject: FW: [expert] Telnet and FTP Combination
 
 
 Because when I ftp in I'm limited to a very restricted directory structure
 (that users home directory) and I move files back and forth between work and
 home... most of these files are in a directory not available to the user I
 log in as with FTP... they're root files (configuration files, etc... to
 work on, read, or study during idle times as well as share with
 co-workers)... so I have to telnet in as a regular user, do a 'su', copy the
 necessary files to the appropriate home directory logout of telnet, then
 re-connect with ftp to actually get the needed file.  It'd be much nicer to
 do this in one single connection.
 
 -Original Message-
 From: Jean-Michel Dault [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, March 07, 2000 5:26 PM
 To: Joe Sheble
 Cc: Expert Mandrake List
 Subject: Re: [expert] Telnet and FTP Combination
 
 
 On Tue, 7 Mar 2000, Joe Sheble wrote:
 
  Does anybody know of an application that combines both the functionality
 of
  a telnet server and an ftp server?  As well as offering a Linux based and
  Windows version of the server and appropriate clients?
 
 Why do you need a combined application? There is the standard telnetd and
 standard ftpd, and you can use the MS$ telnet client and ws_ftp/cute_ftp.
 
 Jean-Michel Dault
 [EMAIL PROTECTED]
 
 
 
  Joseph (Joe) Sheble
  a.k.a. Wizaerd
  
  Wizaerd's Realm
  http://www.wizaerd.com
  3D Art, ColdFusion, Illustration, Canvas
  a little bit of everything...
  
  ColdFusion Developer
  iTOOL.com
  http://www.itool.com
  Come Build Your Site Today