[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Patch for gss ftp client to work through stateful firewalls

To: "Markus Moeller" <markus_moeller@compuserve.com>
Subject: Re: Patch for gss ftp client to work through stateful firewalls
From: Sam Hartman <hartmans@MIT.EDU>
Date: Fri, 25 Apr 2003 15:16:43 -0400
Cc: <heimdal-discuss@sics.se>
In-Reply-To: <021a01c30b5c$03388b80$eba27ad5@home> (Markus Moeller's messageof "Fri, 25 Apr 2003 19:53:46 +0100")
References: <021a01c30b5c$03388b80$eba27ad5@home>
Sender: owner-heimdal-discuss@sics.se
User-Agent: Gnus/5.090017 (Oort Gnus v0.17) Emacs/21.2 (gnu/linux)

>>>>> "Markus" == Markus Moeller <markus_moeller@compuserve.com> writes:

    Markus> I have a patch for the gss ftp client to work with my
    Markus> proftpd gss module http://sourceforge.net/projects/gssmod/
    Markus> which switches to CCC mode just before sending the
    Markus> PORT/PASV/EPSV/EPRT command.  This allows stateful
    Markus> firewalls like Checkpoint to inspect the traffic. You can
    Markus> download it from
    Markus> http://sourceforge.net/project/showfiles.php?group_id=70951.

And of course completely defeats the security of your FTP connection
by using a clear non-integrity-protected channel.

References:
- Patch for gss ftp client to work through stateful firewalls
  - From: "Markus Moeller" <markus_moeller@compuserve.com>

Prev by Date: Kerberos on SuSE 8.2
Next by Date: Re: Patch for gss ftp client to work through stateful firewalls
Prev by thread: Patch for gss ftp client to work through stateful firewalls
Next by thread: Re: Patch for gss ftp client to work through stateful firewalls
Index(es):
- Date
- Thread