support of the CCC command

Come here to discuss FileZilla and FTP in general

Moderator: Project members

Post Reply
Message
Author
luckyluc78
500 Command not understood
Posts: 4
Joined: 2009-04-15 12:39
First name: Lucky
Last name: Luc

support of the CCC command

#1 Post by luckyluc78 » 2009-04-15 12:54

if you want hide your password you can use FTPES - FTP over explicit TLS/SSL. But some firewalls don't allow after to transfer data because they cannot open the data channel as they cannot analyse the ftp commands PORT or PASV.

With the CCC command, you can log with encypted password and then disable TLS/SSL.
But this command is not supported by the FileZilla server and client.
is it possible to add it?

Thanks

User avatar
botg
Site Admin
Posts: 35566
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: support of the CCC command

#2 Post by botg » 2009-04-15 13:13

Configure those routers and firewalls according to the Network Configuration guide.

cloud
504 Command not implemented
Posts: 8
Joined: 2009-06-24 07:07
First name: Claudio
Last name: Zanon

Re: support of the CCC command

#3 Post by cloud » 2009-06-24 07:17

botg wrote:Configure those routers and firewalls according to the Network Configuration guide.
...but I do not want to open firewalls for all the connections: I can not ask it to security office people!

I configured the server to be RFC4217 compliant, since I found the improvement of CCC command the one which let me reach all the requirements I have; but now I have to find a client that use it, and if FileZilla have it, it will be great!
(Any hint on what to change, what check? speaking to someone C understand)

Thanks for your work.

User avatar
botg
Site Admin
Posts: 35566
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: support of the CCC command

#4 Post by botg » 2009-06-24 07:54

CCC is too great of a security risk.

whale
500 Syntax error
Posts: 16
Joined: 2008-07-24 03:22
First name: Franklin
Last name: Tse

Re: support of the CCC command

#5 Post by whale » 2009-12-08 11:21

Why is CCC risky? It keeps user credentials encrypted.

User avatar
botg
Site Admin
Posts: 35566
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: support of the CCC command

#6 Post by botg » 2009-12-08 20:33

But as soon as you do CCC, every attacker could simply steal your authenticated session and access all your files on the server.

Post Reply