Suggestion: Add support for ftps client to backup list AND FTP Server w/SSL?

Look into bsdftpd-ssl-1.1.0 as a client to add for sending backups around.

I understand that DA offers SCP as a secure method of xfering backups, but this means sharing a system level account between the two servers.

It would be *much* better to FTPs your backups over a secure ftp connection to the remote box running PureFTPD+SSL+Virtual accounts.


You might also consider using Pure-FTPD with SSL for the base ftp server for DirectAdmin

A guide for *BSD is available here:
http://bsdguides.org/guides/freebsd/networking/pure-ftpd_virtual_users.php

I'm sure the setup process on other *Nix'es would be similar.

Pure-FTPD allows connections over SSL, virtual ftp accounts & a lot mroe.


Don't confuse ftps (SSL over FTP) with sftp ("FTP" over SSH).


Nothig worse than plain text passwords being sent over the net.

Can you explain why it would be better?

Is this simply a religious argument, or are there verifiable reasons?

Jeff

jlasman said:

Can you explain why it would be better?

Is this simply a religious argument, or are there verifiable reasons?

Jeff

Click to expand...

It's just a matter of fact.

If ftps is available & open, why not use it?

But the answer is already in the post above....

When someone wants to securely transfer their backups, but scp is not an option (perhaps you don't want to compromise either server by sharing a key).... then Virtual FTP accounts over SSL can be an option.

If you use scp, then one of the systems will have to be able to have a system level account on the other.

Why would you compromise a server like that if you don't have to?

If your DA server has scp access to an account on another remote server, and the DA server gets hacked, then your remote server is potentially compromised as well. Then you have to start thinking about any vulnerabilities in the remote server that may lead to privilege escalation by that backup user, etc.


With Virtual FTP accounts over SSL there's not much damage the impact would not be as bad -- especially if you set up a cron on the remote system to move the backups out of the virtual ftp users ftp space & into a safer area on the server.