How To Set Up A Ftp Server?

[7h3kk1d]

I want to share some of my folders on my ubuntu desktop via FTP and was wondering whether I should make a lightweight vm to do it or just install some ftp server app and run it?

[Mr-Protocol]

I use filezilla ftp server. Works pretty well. Just remember if you are trying to access from the internet you need to forward ports accordingly. Just make sure you set passwords.

Edited September 7, 2010 by Mr-Protocol

[Infiltrator]

I have been using CerberusFTP for quite a while and I am really happy with it. It also supports encrypted connection, if you are paranoid about someone eavesdropping into your connection.

Very easy to set up and to configure. And if you have to access files from over the web, just do what MrProtocol suggested, open forward ports accordingly.

Edited September 7, 2010 by Infiltrator

[digip]

Make sure when port forwarding you forward both 21 AND 20. FTP requires both ports.

[Mr-Protocol]

I would suggest creating your own ports for FTP instead of using the default 20/21. This way you wont get spammed with failed logins (or possibly successful logins) from scripts that will scan for the open port and hammer it since it knows it is FTP.

[Infiltrator]

Changing the default ports doesn't only minimize the scan attacks but it also gives you a bit more protection. Since the attacker will have to guess what services are running behind those ports.

[7h3kk1d]

Thanks guys

[digip]

Changing the default ports doesn't only minimize the scan attacks but it also gives you a bit more protection. Since the attacker will have to guess what services are running behind those ports.

A port scan would tell you the ports open if the machine in question is online and running the service, and then once you find one, connecting with something as simple as netcat or even a telnet client will usually yield a header, such as what version of the ftp software your running, or ssh, web server, etc. Security through obscurity isn't really security at all. It only ads 30 seconds more work.

[Infiltrator]

A port scan would tell you the ports open if the machine in question is online and running the service, and then once you find one, connecting with something as simple as netcat or even a telnet client will usually yield a header, such as what version of the ftp software your running, or ssh, web server, etc. Security through obscurity isn't really security at all. It only ads 30 seconds more work.

Thanks for correcting that up, but I did know that it would take more than a port scanner to reveal the real services running behind those ports.