Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am planning to make an ftp server for few days for college work. I am going to use Filezilla Server and users with passwords, so thats not the problem.

Are there any other risks involved. ?

share|improve this question
    
This is probably a better candidate for security.stackexchange.com. –  root Jul 31 '13 at 20:01
add comment

3 Answers 3

up vote 3 down vote accepted

Any open port is a security risk!

But since you need to run a server you will have to open a port. There's no workaround.

A possible solution will be to run a small Linux distribution (SliTaz) in a Virtual system VirtualBox, and let your users connect to it, so if someone wishes to exploit the system, they'll exploit the Linux system and not your actual workstation.

Once you're done with the Server you can just ditch the server! ;)

share|improve this answer
    
that is safe..and feasible. I'll try it out –  dhasu Jul 18 '10 at 15:58
    
it worked.. had some trouble configuring LAN port, USB ports on the virtual system,... finally it worked.. –  dhasu Jul 28 '10 at 14:19
add comment

Like everyone here suggests opening a port is necessary.
But, it helps if you can 'hide' the server from the regular world looking for public FTP servers.

So, think about running the server from a different port (as long as your network admin can permit it; that is if its someone else besides you). You can share the port information with others who need to access the server (this is presuming you don't plan to publish the service to the Internet in general, in which case you can host at port 21/tcp).

Another Windows reference for secure servers (I presume you are running a Windows machine).

  1. freeFTPd

freeFTPd is a FTP/FTPS/SFTP server that enables user to access remote files over TCP/IP network such as Internet. Unlike FTP, FTPS and SFTP protocols provide security and strong encryption of data - great for insecure network.

share|improve this answer
add comment

Any open port is a security risk, but you if you need an ftp server you need to have an open port. Making sure that you don't enable anonymous ftp access is certainly a start.

One other thing you could do is to change the port you open. It's security by obscurity which isn't always a good idea, but would protect you from casual inspection.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.