Page 1 of 1

Disabling TLS completely

Posted: 2023-01-24 21:40
by dato
Hello,
I am testing version 1.6.5
Anyone can guide how to disable TLS completely ?
There was setting in version 0.9
Can find that anymore, even purchased server manual...
Dont care about sending data in plain text , more worry about opening ports on firewall.
Thank you in advance!

Re: Disabling TLS completely

Posted: 2023-01-24 21:48
by boco
To the best of my knowledge, FTP over TLS cannot be disabled anymore, it's the way forward. Plain FTP is only supported as a last fallback option.

Re: Disabling TLS completely

Posted: 2023-01-24 22:02
by dato
And what was the last version of FileZilla server where disable TLS was allowed?
Thank you!

Re: Disabling TLS completely

Posted: 2023-01-24 22:04
by boco
0.9.60.2 (now unsupported).

Re: Disabling TLS completely

Posted: 2023-01-24 22:13
by dato
Thanks.
looks like time to switch to SFTP. No need to keep bunch of ports on firewall welcome..

Re: Disabling TLS completely

Posted: 2023-01-24 22:14
by botg
What's the point of disabling TLS? Are you actively seeking to get your data compromised? There are easier ways to commit suicide.

Re: Disabling TLS completely

Posted: 2023-01-24 22:29
by dato
I don't care about data.
what I care is those ports opened on router.
For plain FTP you just keep port 21 opened, nothing else. And router knows what to do with FTP traffic.

Can you confirm that no way to disable TLS in curent version 1.6.5 , even doing XML file editing?
I will keep manual that I purchased :)
Thanks

Re: Disabling TLS completely

Posted: 2023-01-24 22:35
by boco
Declaring and forwarding the data ports to the server machine is largely non-critilcal, as long as the ports are outside of the known-used ones (like the service ports). A port will open only if something starts listening on it and at the same time another thing accesses it from the outside. In other words, as long as the server does not use these ports, accessing them from the outside leads to nowhere.

Edit: Even plain FTP needs the very same configuration. Relying on the router modifying the traffic is unreliable at best, and dangerous at worst (it is only a hackjob, not an official feature).

Code: Select all

Can you confirm that no way to disable TLS in curent version 1.6.5 , even doing XML file editing?
You cannot disable it in any 1.x version. Need to use another server (e. g. Provide Server in its free Mini version does only support plain FTP and TFTP, don't use the old FileZilla Server!).

Re: Disabling TLS completely

Posted: 2023-01-24 23:47
by botg
I don't care about data.
What's your name, credit card number, card expiration date, and card code verification (CCV)? It's just data after all. Feel free to share, you don't care about it getting into other people's hands.

Re: Disabling TLS completely

Posted: 2023-01-27 04:33
by dato
O, man..
If you keep credit card and all that info on your FTP you definitely have to use security.