FTP server on port 21

babadoctor · December 12, 2015

Will my raspberry pi get hacked if i open port 21 on my router and port forward my raspberry pi with a username and password to connect?

I hear that some sort of automated systems target port 21 and try and attack them

tt2468 · December 12, 2015

The automated systems generally use brue force attach methods. You should set a non-generic username and a good password. Also, look into installing anti brute force tools like fail2ban.

babadoctor · December 12, 2015

The automated systems generally use brue force attach methods. You should set a non-generic username and a good password. Also, look into installing anti brute force tools like fail2ban.

What is fail2ban?

t33to · December 13, 2015

I'm unfamiliar with the system on raspberry pi, but I believe it's running raspbian, which is a version of debian linux, in which case you should be able to find some kind of ftp server or system config that bans someone if they fail 10 times in a row. You can also make it so when someone attempts to log in, there is a 30 second wait time before it will respond. These kinds of systems working together is you can keep logins safer on the web. If possible, I'd do away with ftp altogether and go with SCP which uses secure shell (SSH) to login and transfer files.

babadoctor · December 13, 2015

I'm unfamiliar with the system on raspberry pi, but I believe it's running raspbian, which is a version of debian linux, in which case you should be able to find some kind of ftp server or system config that bans someone if they fail 10 times in a row. You can also make it so when someone attempts to log in, there is a 30 second wait time before it will respond. These kinds of systems working together is you can keep logins safer on the web. If possible, I'd do away with ftp altogether and go with SCP which uses secure shell (SSH) to login and transfer files.

How is scp better?

t33to · December 15, 2015

How is scp better?

It's encrypted for starters. And two, if you have SSH running on your system, and I'm almost positive you do (if not go here: https://www.raspberrypi.org/documentation/remote-access/ssh/) you can SCP into the system using the already existing username you use to log into the system. Seems simple enough to me.