Re: What is more worse: Open ftp ports or open vpn port with pptp?

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 02/25/05


Date: Fri, 25 Feb 2005 14:58:00 GMT

On Fri, 25 Feb 2005 10:22:22 +0100, "Louis schreyer"
<spam1@aquarix.de> wrote:

>I would like to access my W2K webserver via a vpn with pptp connection
>(chap2, password with >24 characters).
>I now use the built-in ftp server from w2k server.
>
>What is more secure? Leave the ftp ports open to the public or the vpn port?
>The vpn connection would be nicer for me to work with, but I am not sure if
>it is safe enough. I cannot opn a l2tp connection, my router will not let me
>connect to the server with L2TP, so only PPTP is left.
>
>Any suggestions?

Neither is more or less secure, the security risks are different,
that's all. And it's how you mitigate the risks that count. Stop
worrying so much about which is more secure, and instead decide which
technology you need. Then secure that technology appropriately.

Jeff



Relevant Pages

  • Re: NT4 -> Win2K3 question
    ... disable SMB signing for the Workstation or Server service on a domain ... Get Secure! ... The File Replication Service Event log test ... controller to the following destination domain ...
    (microsoft.public.windows.server.migration)
  • [OT] Re: RSA implementation, please comment.
    ... on a separate server is actually a very good idea, ... This web front uses a well defined and secure ... Don't store the private key on the server. ... Every client gets a smartcard for the decryption (or a HSM, ...
    (comp.lang.perl.misc)
  • Re: Word 2007 Missing User Level Securitty - ARRRGGGGHHHH What were they thinking?
    ... File servers aren't secure? ... Access predates Windows security, ... database system has never been updated or kept current. ... the OS-based database server product, ...
    (microsoft.public.access.security)
  • Re: local admin account password
    ... >> except its based on something specific about the server. ... >> more recovery console and don't think cached logins will work. ... >> The DB file would be encrypted with EFS so only the limited user SQL ... >> and the app itself doesn't really need to be secure as the ...
    (Focus-Microsoft)
  • Re: Questions on secure remote access to Fedora Core 2
    ... not secure at all, because hostnames can be forged. ... The users should generate themselves key pairs for SSH access. ... on the server, work on it, and then send it back. ... Linux-based, then Network Block Devices are a good idea, too. ...
    (comp.os.linux.security)