Is there a way to run FreeBSD ports through port 80?

Lowell Gilbert freebsd-questions-local at be-well.ilk.org
Thu Jul 12 18:44:51 UTC 2012


Peter Vereshagin <peter at vereshagin.org> writes:

> 2012/07/12 13:19:56 -0400 Lowell Gilbert <freebsd-questions-local at be-well.ilk.org> => To Kaya Saman :
> LG> URLs as well as FTP. For ones that aren't, (and assuming the rather
> LG> silly security policies won't allow for an external web-based FTP proxy)
> LG> you may need to bring them in by offline media.
>
> I believe there should be the way of using the passive ftp (and any other
> protocol) via the HTTP CONNECT method to the ftp (or any other port needed for
> other protocol/app) port and then handling the both control and data
> connections through the consequent copmmands and data exhange.

You've just described an FTP proxy. That's already been ruled out.

> Most surprise for me is why no one is interested about what kind of a danger
> the ftp protocol can ever be? i. e. skype is much more vicious in comparison to
> ftp and s much harder to be restricted by a packet filter if even possoible.

Unfortunately, it's common. Often it's a reaction to the idea that FTP
is an insecure protocol -- which is true, in a sense, because
authentication information is passed in the clear, but irrelevant to
anonymous use. This is silly, yes, but it's fairly popular among the
types of "IT" people who think that NAT is a security service. Or
possibly Nothing But HTTP is allowed through the firewall (which is, at
least, a rational response to not knowing much about TCP/IP).

Be well.


More information about the freebsd-questions mailing list