[Xitami] Xitami, FTP, and Security.

[Chris Jones]

Jerry,
	I located a very nice FTP program that may give you what you're
asking for. It is File Share Pro and you can download a copy of it at
www.wfshome.com . I've got it running on the same server as my Xitami.
You can set it up to require a Username and Password and it will give
you a daily log of who, when and what your users downloaded. I
implemented it so my company can track the sales force's updating their
material costs. I "tried" it for a couple of weeks and it works so well,
I purchased a copy of it from Wfshome. As far as there being
security/encryption of the data being transferred, the FTP protocol does
not offer that and was never designed to do so. If that is what you
desire, I'd look into some of the "Blow Fish" encryption technologies.
These programs are usually very inexpensive and do indeed provide some
extreme security. A good suggestion would be to "Blow Fish" encrypt the
files you put on your FTP site and give your user the "Blow Fish'
decryption program and the password to enable them to extract your
encrypted files. Drop me a line if you can't locate an encryption
program and I'll see if I can dig one up for you.
Chris Jones
Sumter, SC 

-----Original Message-----
From: xitami-admin@lists.xitami.org
[mailto:xitami-admin@lists.xitami.org] On Behalf Of Michael diLorenzo
Sent: Wednesday, May 19, 2004 6:48 PM
To: xitami@lists.xitami.org
Subject: Re: [Xitami] Xitami, FTP, and Security.


Hi Jerry,

I'm not sure exactly what type of security you're referring to.  The
term 
"security" usually encompasses several different components.  One of
these 
is validation, which Xitami provides in the form of username/password 
prompts.  This is the one of the simplest forms of validation.  Once you

validate with a username and password, your connection is "trusted" by
the 
server, and you can send and receive data (within your privledges).

If you want security "of the actual data being transmitted," you're 
probably looking for encryption.  I am not aware that Xitami provides 
encryption on the fly like that, although I am not an expert at this.
If 
Xitami were to encrypt data, it would have to be some sort of encryption

that can be decrypted by a web browser, FTP client, or even a DOS 
session.  I am not aware of any type of "decryption" algorithm or
process 
that occurs at, for example, a simple DOS prompt telnet session.

Perhaps I'm just not reading your question correctly.  If you know the 
username and password for an FTP server (any server), I'm not sure what 
other security could be provided "on the fly," and if it was, I'm not
sure 
what kind of additional authentication process you'd have to go through
in 
order to read the data.

Can you give an example of a feature on a different FTP server that does

this?  Thanks!

Michael

On Wed, 19 May 2004 15:01:38 +0000, <jglong3@att.net> wrote:

> Hello  :) :)
>
>
> THANKS for your time, help, and advise.
>
> Started using the FTP portion of Xitami a few weeks ago and all is
> working great.
>
> After reading the Xitami document and in the FTP portion it appears 
> that
> the use of Xitami FTP
> there is no method to establish SECURITY other than the noted USERNAME

> and PASSWORD at the Xitami FTP SERVER. The normal use of the DOS
Command 
> Line FTP and the use of FTP in the browser to copy also has no
security 
> other than the Username and Password prompt.
>
> The following 2 questions are related to any security method with the
> Xitami (v2.5b4) FTP Server of the data transmitted for USERNAME, 
> PASSWORD, and File Data.
>
>
>    1. Is there a method to secure the actual data being transmitted
> using the Xitami Server?
>
>       I have found other providers of FTP CLIENT/SERVER processes that
> provide this
>       protection. I am just curious if this can be done using Xitami.
>
>    2. Does the PRO version of Xitami cover this?
>
>
> Thanks, :) :)
>
> Jerry
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami



-- 
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/


--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami