1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

IPsec policy and FTP

Discussion in 'Computer Security' started by HTF, May 21, 2010.

  1. HTF

    HTF Byte Poster

    181
    0
    14
    Hi,

    I enabled IPsec policy between my VPS and home PC, I would like to do it for the FTP connection so I set appropriate settings but unfortunately it's not working and looking into IPsec monitor I have some authentication errors.
    To test the connectivity I just simply change the port from 21 to 80 and I can established connection over IPsec with no problems (access websites on this server). I also tested RDP over IPsec (port 3389) and it was fine but with FTP port 21 it's not working.
    Do I have to set anything else for the FTP, any other ports in relation to passive/active mode?

    Regs
     
    Certifications: A+
  2. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    Perhaps port 20 as well.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  3. HTF

    HTF Byte Poster

    181
    0
    14
    I also tried with port 20 but as I didn't enable it on the firewall before I implemented IPsec and FTP was working fine I thought it's not the issue, isn't it?
     
    Certifications: A+
  4. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    Won't know till you try it! ;) However, FTP uses both.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  5. HTF

    HTF Byte Poster

    181
    0
    14
    Thx for reply.

    I just tested on my home lab (VMware) and everything works perfect and I really like it as when I deselected "Allow anonymous connections" on my FTP site the password was sent in plain text, now with IPsec Wireshark don't see anything ;)
    I disabled server firewall on my lab environment so maybe that was the problem. I will check/test later on on my VPS.

    Regards
     
    Certifications: A+
  6. SimonD

    SimonD Terabyte Poster Moderator

    3,463
    397
    199
    People always think that FTP just uses port 21 but it doesn't. Port 21 is the command port and port 20 is the data port. Also worth remembering is that connecting to an FTP server can from a client can happen from any port above 1023, once its then connected it will use that port (N) and also N+1 to communicate with the server (for example 1050 and 1051) .
     
    Certifications: CNA | CNE | CCNA | MCP | MCP+I | MCSE NT4 | MCSA 2003 | Security+ | MCSA:S 2003 | MCSE:S 2003 | MCTS:SCCM 2007 | MCTS:Win 7 | MCITP:EDA7 | MCITP:SA | MCITP:EA | MCTS:Hyper-V | VCP 4 | ITIL v3 Foundation | VCP 5 DCV | VCP 5 Cloud | VCP6 NV | VCP6 DCV | VCAP 5.5 DCA
    WIP: VCP6-CMA, VCAP-DCD and Linux + (and possibly VCIX-NV).

Share This Page

Loading...