Pro/Forums - View Single Post

mtsx4000 · 06-14-2009, 11:00 AM

99% certain that the problem is with the ProFTPD version that Overland is running. I have downgraded my FileZilla installation to 3.0.11.1 and it works fine (FTPES – FTP over explicit TLS/SSL)!

The newer versions of FileZilla identified the improper SSL/TLS session shutdowns as a vulnerability that an attacker could cause truncated files with FilaZilla thinking the transfer was successful.

So if you need FTPS to work with FileZilla and Guardian OS then you need to run FileZilla version 3.0.11.1 and nothing newer. Version 3.0.11.1 has more relaxed standards in regard to SSL/TLS session shutdowns.

I hope Overland addresses this in the near future. You can download the old FileZilla version from here: http://www.filehippo.com/download_filezilla/4377/

06-14-2009, 11:00 AM	#3
mtsx4000 Cooling Neophyte Join Date: Mar 2009 Location: NJ Posts: 5	Re: Guardian OS FTPS 99% certain that the problem is with the ProFTPD version that Overland is running. I have downgraded my FileZilla installation to 3.0.11.1 and it works fine (FTPES – FTP over explicit TLS/SSL)! The newer versions of FileZilla identified the improper SSL/TLS session shutdowns as a vulnerability that an attacker could cause truncated files with FilaZilla thinking the transfer was successful. So if you need FTPS to work with FileZilla and Guardian OS then you need to run FileZilla version 3.0.11.1 and nothing newer. Version 3.0.11.1 has more relaxed standards in regard to SSL/TLS session shutdowns. I hope Overland addresses this in the near future. You can download the old FileZilla version from here: http://www.filehippo.com/download_filezilla/4377/ Last edited by mtsx4000; 06-14-2009 at 11:36 AM.