Allowing the internal FTP command access to the internet is a security breach!!

Discussion in 'OT Technology' started by 5Gen_Prelude, Feb 7, 2003.

  1. 5Gen_Prelude

    5Gen_Prelude There might not be an "I" in the word "Team", but

    Joined:
    Mar 14, 2000
    Messages:
    14,519
    Likes Received:
    1
    Location:
    Vancouver, BC, CANADA
    Bear with me. I developed a very quick piece of software for our partner to use. However, the program needs data from us as well as send data to us. To make things easier on everyone, I decided to automate this whole process with an FTP script, triggered by a batch file. So they ran the program and it was having problems uploading the data and after a little while I realized it was also having problems with the download. So, I had him check his ability to access our ftp site via IE. It worked fine (possibly thru their proxy but I'm not sure). Then I asked him to start an FTP session with our site - connection refused. As it turns out, a firewall is preventing him from accessing, so he turns to the IT department and informs them of the problem. Their response:

    "We can't allow the ftp program to access the internet as it would allow outside access to your computer"

    They are running a POS Windows 95 computer as a simple desktop computer. Just how does an FTP program allow outside access to a computer? I mean I could understand if it was a server or something listening to FTP traffic - but a desktop!?
     
  2. SLED

    SLED build an idiot proof device and someone else will

    Joined:
    Sep 20, 2001
    Messages:
    28,118
    Likes Received:
    0
    Location:
    AZ, like a bauce!
  3. 5Gen_Prelude

    5Gen_Prelude There might not be an "I" in the word "Team", but

    Joined:
    Mar 14, 2000
    Messages:
    14,519
    Likes Received:
    1
    Location:
    Vancouver, BC, CANADA
    I should tell him to shut down port 80 since you might get hacked :rolleyes:
     
  4. Penguin Man

    Penguin Man Protect Your Digital Liberties

    Joined:
    Apr 27, 2002
    Messages:
    21,696
    Likes Received:
    0
    Location:
    Edmonton, AB
    Yea, tell him not to run IE either, cause it's the same deal :rolleyes: Too many IT guys don't know what they're doing.
     
  5. Playboy

    Playboy Part time arrogant bastard

    Joined:
    Oct 17, 2000
    Messages:
    35,751
    Likes Received:
    5
    Location:
    Los Angeles
    format c: will take care of that!
     
  6. Aimless

    Aimless Resident drunkey

    Joined:
    Nov 5, 2001
    Messages:
    2,534
    Likes Received:
    0
    Location:
    Wisconsin
    fdisk!
     

Share This Page