RE: file transfer over outbound port 80?

From: Meidinger Chris (chris.meidinger_at_badenit.de)
Date: 08/08/03

  • Next message: Sanjay K. Patel: "Fxscanner and files"
    To: 'abe vigoda' <ells_on_zone@yahoo.com>, security-basics@securityfocus.com
    Date: Fri, 8 Aug 2003 11:15:59 +0100 
    
    

    If port 80 is open, but does not go over a proxy, just have your FTP Server
    listen there and set it for passive mode.
    If port 80 does use a proxy, check to see if you can proxy your FTP over
    that too. Most organizations allow proxied FTP, just not direct.

    badenIT GmbH
    System Support
     
    Chris Meidinger
    Tullastrasse 70
    79108 Freiburg

    -----Original Message-----
    From: abe vigoda [mailto:ells_on_zone@yahoo.com]
    Sent: Thursday, August 07, 2003 5:50 PM
    To: security-basics@securityfocus.com
    Subject: file transfer over outbound port 80?

    Here's our issue:

    We often have engineers on site at customer locations
    where we need to drop off or pick up files from a
    public file server. Currently we are using ftp for
    this purpose however ftp outbound is being blocked by
    more and more of our customers and only port 80 is
    open.

    My question is really what is the best way to work
    around this problem? Is there a web-based application
    out there that only does this simple job over port 80?
    I have never seen this addressed here but I know we're
    not the first ones to run into this issue.

    Thanks all for any help.

    __________________________________
    Do you Yahoo!?
    Yahoo! SiteBuilder - Free, easy-to-use web site design software
    http://sitebuilder.yahoo.com

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Sanjay K. Patel: "Fxscanner and files"

    Relevant Pages

    • Re: IPSwitch, Inc. WS_FTP Server
      ... > bounce attack as well as PASV connection hijacking. ... > The FTP bounce vulnerability allows a remote attacker to cause the ... > anonymously along with any internal addresses that the FTP server has ... That means it's got to handle a PORT ...
      (Bugtraq)
    • Re: Internet Explorer Keeps Timing out on FTP
      ... >> This is a problem with the FTP client. ... I have not started the FTP server ... > client chooses which method to use, by sending either a PORT or PASV ... > command to the server. ...
      (microsoft.public.inetserver.iis.ftp)
    • RE: RMF Spreadsheet Reporter
      ... >PORT statement below do not match my target FTP server.. ... The IP address in the PORT command is the IP address of the FTP *client* ... For IBM-MAIN subscribe / signoff / archive access instructions, ...
      (bit.listserv.ibm-main)
    • Re: unable to apt-get or wget
      ... rule behind my network, or I was behind a proxy server, I shouldn't be ... Unless there were different rules set for ftp and http. ... that basic web stuff is found on port 80, secure web on port 443, ftp ...
      (alt.os.linux)
    • Re: Protokolldefinition gesperrt
      ... wenn du im Bankingprogramm den Proxy ... Habe bislang immer für diverse Bankingprogramme nur den Port 3000 an der ISA ... Für den FTP Zugriff ist der FTP Zugriffsfilter zuständig, ...
      (microsoft.public.de.german.isaserver)