tftp security

[Ean W-S]

Hi,

I have some questions, we want to use tftp to transfer files from one
machine to another. I am setting up tftpd so that it can only access
tftpdir, the home account of tftp. This is all the secutity that I need.
My question is can tftp be used to gain a wider access to the machine?

Is there other ways to transfer files with even more security?

Cheers

[Andrew Ernst]

I would suggest unless this is a tftp specific application, that you
look at something like FTP, which can require a username and password.

The only suggestion I would have, is make sure your tftp "home"
directory is read-only, so as to avoid attackers from filling up your
hard drives.... and then think perhaps of placing a network layer
filter on either your machine or the gateway device onto your network
(e.g. a router) that prevents unauthorized use of tftp.

Just some ideas...

-- Andrew Ernst

Andrew Ernst
Network Operations
W3 Internet Services Ltd,
http://www.w3internet.com