FTP Active mode vs Passive Mode - NETSEC

Latest

Learning, Sharing, Creating

Cybersecurity Memo

Thursday, August 21, 2014

FTP Active mode vs Passive Mode

Traffic flow for Active mode and Passive mode:




Active FTP

 1. Active FTP :

     command : client >1023 -> server 21
     data    : client >1023 <- server 20

Running ftp command from client 10.94.200.28 to connect server 10.94.200.14:
C:\Users\j>ftp 10.94.200.14
Connected to 10.94.200.14.
220-FileZilla Server version 0.9.41 beta
220-written by Tim Kosse ([email protected])
220 Please visit http://sourceforge.net/projects/filezilla/
User (10.94.200.14:(none)): test
331 Password required for test
Password:
230 Logged on
ftp> debug
Debugging On .
ftp> mput C:\Users\john\Documents\a1.txt
mput C:\Users\john\Documents\a1.txt?
---> PORT 10,94,200,28,255,15 
200 Port command successful
---> STOR a1.txt
150 Opening data channel for file transfer.
226 Transfer OK
ftp: 30348 bytes sent in 0.00Seconds 30348000.00Kbytes/sec.
ftp> ls
---> PORT 10,94,200,28,255,121
(Port number is 255*256+121=65401)
200 Port command successful
---> NLST
150 Opening data channel for directory list.
a1.txt
Tekradius DB.bak
226 Transfer OK
ftp: 26 bytes received in 0.00Seconds 26000.00Kbytes/sec.
ftp>

On server 10.94.200.14, checked the port number 65401 with netstat -na command

Passive FTP

 2. Passive FTP :

     command : client >1023 -> server 21
     data    : client >1024 -> server >1023


ftp> literal pasv
---> pasv
227 Entering Passive Mode (10,94,200,14,233,114)
ftp>

Notes:
FTP communications use two port number values – one for commands (port 21 by default) and one for data transfer (this is where the PORT command comes into play).

The PORT command is sent by an FTP client to establish a secondary connection (address and port) for data to travel over. In some FTP implementations port 20 is used for data, but that is the exception rather than the rules. Typically in a trace you will see data crossing over a dynamic port number (IANA states that this range should be between 49152 through 65535, but most likely you’ll see your application using something just above 1024 – the area that used to be the dynamic port number area).


Free FTP Software

A FTP Client is a special program allowing your computer to connect to our services to manage your files, you can upload, download, rename, organize files and change permissions when necessary with most FTP clients..

We recommend that all webmasters use FTP clients to transfer files to and from your hosting account for numerous reasons including the ease of use such as the ability in most clients to remember connection and login information..

Below are our recommended FTP clients:

Download SmartFTP Client (32-bit) for Windows

Download SmartFTP Client (64-bit) for Windows

Download CoreFTP for Windows

Download FileZilla for Windows   

Download FileZilla for Linux   

Download FileZilla for Mac OS X
   

Download Cyberduck for Mac OS X





No comments:

Post a Comment