site to site (fxp)

[Zarxan]

Hi.

what im looking for is a way to allow unencrypted data between
server <-> server
yet still have encrypted data between
user <-> server

regards from someone who has searched the forums and stared at ini's after this question way to long :P

[Zarxan]

I found the problem with a little help from an nice anonymous person

I had:
Require_Encrypted_Auth = !-xxxxx *
Require_Encrypted_Data = *

when i should've used:

Require_Encrypted_Auth = !-xxxxx *
Require_Encrypted_Data = !*

[sk1nt]

This Require_Encrypted_Data = !* doesnt do this:

yet still have encrypted data between
user <-> server

Just so you know.

[Zarxan]

For some reason it does m8.
I think when your forced to login with ssl it stays so until you start an operation that doesnt want encryption.. like fxp'ing.
ioFTPD realy needs to fix the ssl fxp thing so you dont have to rely on other servers to open an ssl connection.

[1] Opening data connection IP: x.x.x.x PORT: 1999
[1] RETR xxxx.zip
[1] 150 Opening BINARY mode data connection for xxxx.zip.
[1] Encryption algorithm: TLSv1 RC4-MD5-128
[1] 226 Transfer complete.
[i] xxxx.zip 127,9 kbytes/0,18(s)/727,52Kbps
[i] Transfered 3 file(s) - Total: 1,1 M byte(s) in 0,57 (0,00 KBps)
[i] Transfer queue complete

[esmandil]

Actually, it is ftp client who decides how to transfer data. With setup as above, data between server and user can be either encrypted or transfered in clear -- it's clients choice.

[Zarxan]

So how do i force ssl between user - server and not server - server ?

[Mouton]

Originally posted by Zarxan
So how do i force ssl between user - server and not server - server ?

You don't because you can't.

[esmandil]

In other words, how the heck is io supposed to know if data it is sending goes to client or to other ftp serwer?

[Zarxan]

Mouton, then its about time they either fix that or fix so ioftpd can start a ssl session with other servers.

Google is your friend Esmandil
http://www.g6ftpserver.com/en/faq#Co...on,internet.14
or if you realy wanna go hardcore
http://www.faqs.org/rfcs/rfc959.html

[Mouton]

Originally posted by Zarxan
Mouton, then its about time they either fix that or fix so ioftpd can start a ssl session with other servers.

It's already working in the upcoming, non-public yet, version.

[Zarxan]

Thats real good news have a nice day