Re: What is more worse: Open ftp ports or open vpn port with pptp?

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 02/25/05


Date: Fri, 25 Feb 2005 14:58:00 GMT

On Fri, 25 Feb 2005 10:22:22 +0100, "Louis schreyer"
<spam1@aquarix.de> wrote:

>I would like to access my W2K webserver via a vpn with pptp connection
>(chap2, password with >24 characters).
>I now use the built-in ftp server from w2k server.
>
>What is more secure? Leave the ftp ports open to the public or the vpn port?
>The vpn connection would be nicer for me to work with, but I am not sure if
>it is safe enough. I cannot opn a l2tp connection, my router will not let me
>connect to the server with L2TP, so only PPTP is left.
>
>Any suggestions?

Neither is more or less secure, the security risks are different,
that's all. And it's how you mitigate the risks that count. Stop
worrying so much about which is more secure, and instead decide which
technology you need. Then secure that technology appropriately.

Jeff



Relevant Pages

  • Re: write with cURL
    ... It takes time to set up an account for you, process the billing, etc. ... Sorry, my servers are secure. ... Nothing you have told me shows me you know how to lock down a server so that it is secure - other than to use the server's file security. ...
    (alt.php)
  • Re: NT4 -> Win2K3 question
    ... disable SMB signing for the Workstation or Server service on a domain ... Get Secure! ... The File Replication Service Event log test ... controller to the following destination domain ...
    (microsoft.public.windows.server.migration)
  • [OT] Re: RSA implementation, please comment.
    ... on a separate server is actually a very good idea, ... This web front uses a well defined and secure ... Don't store the private key on the server. ... Every client gets a smartcard for the decryption (or a HSM, ...
    (comp.lang.perl.misc)
  • Re: Word 2007 Missing User Level Securitty - ARRRGGGGHHHH What were they thinking?
    ... File servers aren't secure? ... Access predates Windows security, ... database system has never been updated or kept current. ... the OS-based database server product, ...
    (microsoft.public.access.security)
  • Re: local admin account password
    ... >> except its based on something specific about the server. ... >> more recovery console and don't think cached logins will work. ... >> The DB file would be encrypted with EFS so only the limited user SQL ... >> and the app itself doesn't really need to be secure as the ...
    (Focus-Microsoft)