Author Topic: FTP transfer scanning  (Read 4751 times)

0 Members and 1 Guest are viewing this topic.

Offline Lars-Erik

  • Avast Evangelist
  • Sr. Member
  • ***
  • Posts: 394
    • Lars-Erik Østerud
FTP transfer scanning
« on: April 18, 2005, 12:41:29 AM »
Is there a way to make avast! scan FTP traffic (port 21) ?

Could it be added to some of the existing scanners?
Like the web-scanner ("HttpRedirectPort=80,21") or?
www.osterud.name - ICQ: 7297605 - AIM/Yahoo/Facebook/Skype/Astra: LarsErikOsterud

sded

  • Guest
Re: FTP transfer scanning
« Reply #1 on: April 18, 2005, 01:07:54 AM »
Port 21 is only the ftp connection for control.  For passive ftp, the connection for data can be any selected port, including very high numbers-like 60000 range.  Probably would take a fair amount of effort for avast! to find the incoming port by monitoring ftp sessions, do a redirect,  and then scan the traffic.  Really not much advantage in scanning ftp traffic like a web page-it is not usually opened automatically, and when it is opened, will be scanned by the Standard Shield.  Just another .exe or .zip (or even .scr) file or such, after all; not dynamic like some http pages with scripts, active X, etc.  embedded in them.
« Last Edit: April 18, 2005, 05:18:13 PM by sded »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: FTP transfer scanning
« Reply #2 on: April 18, 2005, 01:08:55 AM »
No, it is pretty much the same as your other post relating to https, there is nothing to stop you trying to do as you suggest and see if it works.

Standard Shield should scan the ftp downloads, if you have it set to High and scan all created/modified files.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: FTP transfer scanning
« Reply #3 on: April 18, 2005, 08:10:19 AM »
Actully, the WebShield proxy does support ftp. It's an undocumented feature, but it's there and works.
To turn it on, instead of putting 21 to the list of redirected ports, instruct your ftp downloader (or browser) to use proxy server "localhost" on port "12080".
If at first you don't succeed, then skydiving's not for you.

sded

  • Guest
Re: FTP transfer scanning
« Reply #4 on: April 18, 2005, 03:36:04 PM »
Vik, I must be missing something.  I am using Filezilla as an FTP client (as well as others).  When I select localhost:12080 for the proxy, seems to function OK, but doesn't seem to get the data shown as scanned in the Webshield last scanned list.  Or is this mainly for browsers?   Thanks; Ed.
« Last Edit: April 18, 2005, 06:43:31 PM by sded »