B4J Question FTP Server and Security

[RickV]

After implementing my ftp server and opening a few ports on the network firewall, I have noticed what seems to be a few requests to use my server as a hop....

Is there any security issues I should know about?

I have set usernames and passwords, quite lengthy and unmeaningful really and know that a connect from windows pops up a username and password dialogue box and a ftp client well you need to enter these credentials before hitting the connect button.

FTPSer.AddUser("mmftp4dataC0nn3ct","pa55w0rd.Sf0rC0nn3ct.")

Logs

Number of clients: 0
client: CONNECT www.google.com:443 HTTP/1.1
client: Host: www.google.com:443
client: User-Agent: Go-http-client/1.1
client: 
terminated
Number of clients: 0

 

[Erel]

Security is an endless race.
A simple measure that can help block such attempts is to configure the firewall and limit access to specific ips or countries (if possible).

 

[MicroDrie]

Old School security wisdom was based on you know what (username and password) and you have some of yours like the data in a cookie. You must realize that this method only protects against unauthorized access by third parties. It is important that you close your FTP server environment very tightly and that all OS and FTP server environment updates are always protected with the latest security fixes.