Default host and security?

Question

Level 1

8 points

Default host and security?

In order to get FTP wokring with AirPort Extreme, the server must be the default host, DMZ, port mappings are not enough.

How safe are Apples default host?
Is it behind the same firewall as the rest of the network?

MacBook Pro 15" (5.3), Mac OS X (10.6.1)

Posted on Dec 27, 2010 1:33 PM

Reply

Answer 1

Tesserax

Level 10

148,781 points

Dec 27, 2010 2:24 PM in response to Elimo

How safe are Apples default host?
Is it behind the same firewall as the rest of the network?

A "Default Host" is the same thing as placing the host device inside a DMZ. By definition, a device inside a DMZ is completely exposed to the Internet as the router's firewall is completely bypassed.

Reply

Answer 2

Elimo Author

Level 1

8 points

Dec 27, 2010 3:23 PM in response to Tesserax

yikes, that does not seem so good.

If a host is totaly exposed with "Default Host", are port mappings needed?

I hope my NAS is strong enough.
I wish there was some other way to get my FTP to work with AE.

Reply

Answer 3

Tesserax

Level 10

148,781 points

Dec 27, 2010 7:54 PM in response to Elimo

If a host is totaly exposed with "Default Host", are port mappings needed?

No, port mapping would not be required as all ports are already opened.

I wish there was some other way to get my FTP to work with AE.

FTP does work with the 802.11n AirPort Extreme Base Station (AEBSn). There is even a default service setting in Port Mapping for it.

The AEBSn is not; however, a FTP server, so the NAS device that you are using would have to have that service available.

Reply

Answer 4

Elimo Author

Level 1

8 points

Dec 28, 2010 9:27 AM in response to Tesserax

Thanks Tesserax for clarifying "Default Host"!

I have a Netgear ReadyNAS with a FTP server (ProFTPD) with port mappings (21 and passive ports) but there are still access problems from WAN.
Previously it worked better but after the updates it's harder to get access. With "Default Host" it worked perfectly, but that seems risky.

I really would like it to work with just port mappings.
Does AE have a preferred passive port range for FTP?

I read somewhere else that the only way to get a FTP server to work with AE is to set it as "Default Host".

Message was edited by: Elimo

Reply

Answer 5

Tesserax

Level 10

148,781 points

Dec 28, 2010 12:22 PM in response to Elimo

Does AE have a preferred passive port range for FTP?

Not exactly preferred, but it does have a Port Mapping setting specifically for FTP on TCP port 21.

I read somewhere else that the only way to get a FTP server to work with AE is to set it as "Default Host".

Anything is possible, but I am not aware of any issues with the Extreme not allowing FTP communications through.

Reply

Answer 6

Elimo Author

Level 1

8 points

Dec 28, 2010 5:43 PM in response to Tesserax

I am not alone:
http://discussions.apple.com/message.jspa?messageID=4069407

And I don't wan't to use active mode.

Yes it's probably possible to solve.

Reply