Re: nbsession vs ftp

From: Alun Jones (alun@texis.com)
Date: 08/22/02 

From: alun@texis.com (Alun Jones)
Date: Thu, 22 Aug 2002 00:42:50 GMT

In article <ak0jbr$l7k$3@nyheter.crt.se>, phn@icke-reklam.ipsec.nu wrote:
>manny <mannyr@prontomail.com> wrote:
>> We have Windows NT servers in the DMZ that our internal NT servers map
>> a drive to to copy files. Internal servers -> DMZ servers. Our
>> Firewall administrator closed the door to nbsession which allows our
>> internal server to map a drive on the DMZ server. I told the admin
>> that he should allow nbsession from internal to DMZ and disallow from
>> DMZ to internal. He told me to use FTP.
>
>> On a security viewpoint, is FTP better than nbsession?
>
>Yes. Each session is authenticated. An nbsession might carry
>other traffic in either direction while open.

And, when the FTP client and server are configured to encrypt, and require
encryption, respectively, there's even more security involved.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.] 

-- 
Texas Imperial Software   | Try WFTPD, the Windows FTP Server. Find us at
1602 Harvest Moon Place   | http://www.wftpd.com or email alun@texis.com
Cedar Park TX 78613-1419  | VISA/MC accepted.  NT-based sites, be sure to
Fax/Voice +1(512)258-9858 | read details of WFTPD Pro for XP/2000/NT.

Relevant Pages

  • Re: To tri-homed, or not to tri-homed... that is the question
    ... > It's just the site we test prior to pushing content to the live server. ... It sounded like you already have a Back-to-Back DMZ. ... In fact, if it is anything other than FTP, ... new account *locally* on the Web Server itself for them to use. ...
    (microsoft.public.windows.server.sbs)
  • Re: Symantec VPN 200R opinions, reviews, or substitutions needed
    ... that I don't really need the DMZ ... Just the ability to host a ftp & web server. ... >>disable all firewalling for a specific address, ...
    (comp.security.firewalls)
  • Re: DNS and DMZ zone problem
    ... Hmmm well, if i have just a ftp server in my DMZ, and its packed with 100 ... > domain controllers entirely within your LAN, ...
    (microsoft.public.win2000.dns)
  • Re: DNS and DMZ zone problem
    ... > we have a lot of users that get stuff from us from our ftp site. ... Don't put DCs in your DMZ, and don't host a public FTP site on ... your LAN, whether on a DC or member server or standalone server. ...
    (microsoft.public.win2000.dns)
  • RE: fedora-list Digest, Vol 6, Issue 266
    ... Re: OT: Setting up a forwarding mail domain in DMZ without ... Re: Sound Problem ... downloaded the yum.conf for fedora from Redhat's website. ... Server: Fedora.us Extras ...
    (Fedora)