home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Columbia Kermit
/
kermit.zip
/
newsgroups
/
misc.19980424-19980901
/
000356_news@newsmaster….columbia.edu _Tue Aug 11 09:35:01 1998.msg
< prev
next >
Wrap
Internet Message Format
|
2020-01-01
|
3KB
Return-Path: <news@newsmaster.cc.columbia.edu>
Received: from newsmaster.cc.columbia.edu (newsmaster.cc.columbia.edu [128.59.35.30])
by watsun.cc.columbia.edu (8.8.5/8.8.5) with ESMTP id JAA21882
for <kermit.misc@watsun.cc.columbia.edu>; Tue, 11 Aug 1998 09:35:01 -0400 (EDT)
Received: (from news@localhost)
by newsmaster.cc.columbia.edu (8.8.5/8.8.5) id JAA04367
for kermit.misc@watsun; Tue, 11 Aug 1998 09:35:00 -0400 (EDT)
Path: news.columbia.edu!watsun.cc.columbia.edu!fdc
From: fdc@watsun.cc.columbia.edu (Frank da Cruz)
Newsgroups: comp.protocols.kermit.misc
Subject: Re: FTP versus Telnet connect
Date: 11 Aug 1998 13:34:59 GMT
Organization: Columbia University
Lines: 46
Message-ID: <6qpha3$nao$1@apakabar.cc.columbia.edu>
References: <35CF4F12.5FF6@ibm.net> <6qnkkk$o04$1@apakabar.cc.columbia.edu> <35CF8EC5.650E@ibm.net>
NNTP-Posting-Host: watsun.cc.columbia.edu
Xref: news.columbia.edu comp.protocols.kermit.misc:9073
In article <35CF8EC5.650E@ibm.net>, Hal W. Hensley <hwhens@ibm.net> wrote:
: Frank da Cruz wrote:
: >
: ...snip...
: > When you say your client's host does not accommodate Telnet sessions, this
: > probably means that they have elected not to run a Telnet server.
:
: That is correct for security reasons.
:
: ...snip...
: > But there are other approaches, depending on the platform. If the host is
: > UNIX-based (for example), the Kermit program for UNIX, which is C-Kermit
: > 6.0:
: >
: > http://www.columbia.edu/kermit/ck60.html
: >
: > can be set up accept incoming TCP connections on the socket of your
: > choice, just like an FTP server, except using Kermit protocol rather than
: > FTP. This is documented in the manual, "Using C-Kermit", 2nd Edition,
: > pages 127-128.
:
: The host platform is a Sun box running Solaris for which we spec'd
: C-Kermit 6.0. Refering to your cite pp.127-28, what are the security
: implications revolving around this type of open port?
:
C-Kermit 6.0 allows can be told to await a connection on a specific port and
then enter server mode when the connection comes in. This would be done by
having it execute the following commands (using port 3000 to illustrate):
set port * 3000
server
Since the "set port" command blocks, these commands should be executed from
a command file or macro.
C-Kermit offers a number of security measures when used as a server:
. A login ID and password can be set.
. Its services can be selectively disabled.
These measures are described in detail in Chapter 11 of the manual.
The next release of C-Kermit will have some additional features in this
area -- watch this space for announcements.
- Frank