View Single Post
Unread 09-17-2006, 12:50 PM   #2
blue68f100
Thermophile
 
blue68f100's Avatar
 
Join Date: Jul 2005
Location: Plano, TX
Posts: 3,135
Default Re: Running a 4100 as FTP Server

Any time you expode your self to the www you are subject to attacks. If you watch the first thing they test is default passwords then Brut force, dictionary attackes.

All ports 1024 and lower are always hammered. You have a couple of options. First move the def port to something between 1024 and 65535. And only you know the port. A few will find it, there is no way around it. The 4100 supports JVM, so you could do a secure login. Your password should be made up of ALL Printable char and the max lenght. Something like this GCd%W9G2"$+Nr@gmkS;A8;bB& and yes it's not likely you could remember it.

Some of the routers with comercial firewalls can detect and block some of these attacks. The snap it self has none of that, execpt user access control. So make sure you remove or add a pw to Guest.

The 4100 does not support hd >137gig. No LBA48bit support.

Systems are only secure as the Password. If you pw is in a brut force dictionary your already broken. Depending on your ISP uplink speed you could use a VPN router to gain access through a 3DES auth tunnel. This is the way I connect to my system when away from home. This way the common ports are not exposed.

I use to have a site that gave the proabiliy of brute force attack. Most all of mine with a sample rate of 100k/sec would take > 23 yrs.
__________________
1 Snap 4500 - 1.0T (4 x 250gig WD2500SB RE), Raid5,
1 Snap 4500 - 1.6T (4 x 400gig Seagates), Raid5,
1 Snap 4200 - 4.0T (4 x 2gig Seagates), Raid5, Using SATA converts from Andy

Link to SnapOS FAQ's http://forums.procooling.com/vbb/showthread.php?t=13820
blue68f100 is offline   Reply With Quote