FTP Server

[Mr.Swiss0364]

Hello, So I wanted to run an FTP server on my home server just so my friends can access to files to my game server, I tried setting up FileZilla but it just would not work, i tried port forwarding but it would not work. I did get WingFTP working however it worked for about 3 days and i had to re install it every time if the server restarted. any good free options for just 1 person?

[m9x3mos]

15 minutes ago, Mr.Swiss0364 said:

Hello, So I wanted to run an FTP server on my home server just so my friends can access to files to my game server, I tried setting up FileZilla but it just would not work, i tried port forwarding but it would not work. I did get WingFTP working however it worked for about 3 days and i had to re install it every time if the server restarted. any good free options for just 1 person?

You can try xlight if you are running windows. 

What was wrong with filezilla. That was what I used and had no problem with it. 

[Mr.Swiss0364]

1 hour ago, m9x3mos said:

You can try xlight if you are running windows. 

What was wrong with filezilla. That was what I used and had no problem with it. 

Not to sure, trying to get the xlight working to, with winscp just says connected timed out, i have port forwarded in my router and checked the tutorials 

[m9x3mos]

44 minutes ago, Mr.Swiss0364 said:

Not to sure, trying to get the xlight working to, with winscp just says connected timed out, i have port forwarded in my router and checked the tutorials 

You can try checking to see if that port is open to the internet as it is possible that something (even your isp) might be blocking the connection. 

https://www.grc.com/x/ne.dll?bh0bkyd2

Can you connect to it from within your network? 

[m9x3mos]

45 minutes ago, Mr.Swiss0364 said:

Not to sure, trying to get the xlight working to, with winscp just says connected timed out, i have port forwarded in my router and checked the tutorials 

Oh and also try checking the firewall on the host machine if you haven't already. 

[LIGISTX]

Don’t use ftp… hopefully you are at least using SFTP. 

[Mr.Swiss0364]

14 hours ago, m9x3mos said:

Oh and also try checking the firewall on the host machine if you haven't already. 

I will check that now

 

[Mr.Swiss0364]

11 hours ago, LIGISTX said:

Don’t use ftp… hopefully you are at least using SFTP. 

Why not? just my friend so he can change some files in my game server while im not doing it myself

 

[m9x3mos]

4 minutes ago, Mr.Swiss0364 said:

Why not? just my friend so he can change some files in my game server while im not doing it myself

 

Mainly security reasons and it is easier to hack FTP vs SFTP.

You would be a small target but a target none the less for people to go after.

The SSH access of FTP (which is what SFTP is) offers some mitigation and protection of the normal attack vectors of FTP.

[Mr.Swiss0364]

17 minutes ago, m9x3mos said:

Mainly security reasons and it is easier to hack FTP vs SFTP.

You would be a small target but a target none the less for people to go after.

The SSH access of FTP (which is what SFTP is) offers some mitigation and protection of the normal attack vectors of FTP.

I will defo be carefull with it, Thanks

[Mr.Swiss0364]

28 minutes ago, Mr.Swiss0364 said:

I will check that now

 

all working now thank you!

[m9x3mos]

1 hour ago, Mr.Swiss0364 said:

all working now thank you!

Happy I was able to help. 

[LIGISTX]

6 hours ago, Mr.Swiss0364 said:

Why not? just my friend so he can change some files in my game server while im not doing it myself

 

Because if any bots see an open FTP port, they are going to start attacking it... and bots are perminently scanning evry IP that exists. I used to epxose port 22 for SSH one of my r-pi's and I would get thousands of attempted logins per day.

 

Secure your sigical assets, don't assume just because your friend is the only one trying to connect....... that your friend is the only one trying to connect, because it isn't just them trying ;).

 

SFTP isn't any harder to set up, so might as well do it.

[Jarsky]

Worth noting that SFTP is shell based FTP, I think what you guys are talking about is FTPS (Secured FTP). 

I assume this is being run on a Windows machine, so really SFTP isn't a thing unless you're going to be installing OpenSSH for Windows. 

 

Both SFTP & FTPS encrypt the traffic as well as the credentials, while plain FTP sends the credentials in Plain Text. 

This is only an issue with MitM attacks. As long as your friend isn't connecting to dodgy WIFI's then it doesn't really provide any extra security. 

 

The big thing though would be to ensure your security/permissions are setup properly, and using a decent strength password for the user. 

(Client Certification Authentication would be ideal, but at least a decent strength passphrase would be recommended)