Disabling TLS completely

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
dato
500 Command not understood
Posts: 5
Joined: 2023-01-24 21:33

Disabling TLS completely

#1 Post by dato » 2023-01-24 21:40

Hello,
I am testing version 1.6.5
Anyone can guide how to disable TLS completely ?
There was setting in version 0.9
Can find that anymore, even purchased server manual...
Dont care about sending data in plain text , more worry about opening ports on firewall.
Thank you in advance!

User avatar
boco
Contributor
Posts: 26430
Joined: 2006-05-01 03:28
Location: Germany

Re: Disabling TLS completely

#2 Post by boco » 2023-01-24 21:48

To the best of my knowledge, FTP over TLS cannot be disabled anymore, it's the way forward. Plain FTP is only supported as a last fallback option.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

dato
500 Command not understood
Posts: 5
Joined: 2023-01-24 21:33

Re: Disabling TLS completely

#3 Post by dato » 2023-01-24 22:02

And what was the last version of FileZilla server where disable TLS was allowed?
Thank you!

User avatar
boco
Contributor
Posts: 26430
Joined: 2006-05-01 03:28
Location: Germany

Re: Disabling TLS completely

#4 Post by boco » 2023-01-24 22:04

0.9.60.2 (now unsupported).
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

dato
500 Command not understood
Posts: 5
Joined: 2023-01-24 21:33

Re: Disabling TLS completely

#5 Post by dato » 2023-01-24 22:13

Thanks.
looks like time to switch to SFTP. No need to keep bunch of ports on firewall welcome..

User avatar
botg
Site Admin
Posts: 34710
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Disabling TLS completely

#6 Post by botg » 2023-01-24 22:14

What's the point of disabling TLS? Are you actively seeking to get your data compromised? There are easier ways to commit suicide.

dato
500 Command not understood
Posts: 5
Joined: 2023-01-24 21:33

Re: Disabling TLS completely

#7 Post by dato » 2023-01-24 22:29

I don't care about data.
what I care is those ports opened on router.
For plain FTP you just keep port 21 opened, nothing else. And router knows what to do with FTP traffic.

Can you confirm that no way to disable TLS in curent version 1.6.5 , even doing XML file editing?
I will keep manual that I purchased :)
Thanks

User avatar
boco
Contributor
Posts: 26430
Joined: 2006-05-01 03:28
Location: Germany

Re: Disabling TLS completely

#8 Post by boco » 2023-01-24 22:35

Declaring and forwarding the data ports to the server machine is largely non-critilcal, as long as the ports are outside of the known-used ones (like the service ports). A port will open only if something starts listening on it and at the same time another thing accesses it from the outside. In other words, as long as the server does not use these ports, accessing them from the outside leads to nowhere.

Edit: Even plain FTP needs the very same configuration. Relying on the router modifying the traffic is unreliable at best, and dangerous at worst (it is only a hackjob, not an official feature).

Code: Select all

Can you confirm that no way to disable TLS in curent version 1.6.5 , even doing XML file editing?
You cannot disable it in any 1.x version. Need to use another server (e. g. Provide Server in its free Mini version does only support plain FTP and TFTP, don't use the old FileZilla Server!).
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 34710
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Disabling TLS completely

#9 Post by botg » 2023-01-24 23:47

I don't care about data.
What's your name, credit card number, card expiration date, and card code verification (CCV)? It's just data after all. Feel free to share, you don't care about it getting into other people's hands.

Post Reply