RE: file transfer over outbound port 80?

[Tony Kava <securityfocus () pottcounty com>]

Any standard web server can provide a directory listing for the purpose of
downloading files by HTTP (Apache comes to mind).  Uploading may be possible
as well.  It is a trivial matter to write a Perl script to accept uploaded
files in the form of POSTed data, and there are probably many prewritten
scripts available for that purpose.  You may also want to consider using
HTTPS as these sites probably have 443/tcp open for that purpose as well.

--
Tony Kava
Network Administrator
Pottawattamie County, Iowa



-----Original Message-----
From: abe vigoda [mailto:ells_on_zone () yahoo com]
Sent: Thursday, 07 August, 2003 10:50
To: security-basics () securityfocus com
Subject: file transfer over outbound port 80? 


Here's our issue:

We often have engineers on site at customer locations
where we need to drop off or pick up files from a
public file server. Currently we are using ftp for
this purpose however ftp outbound is being blocked by
more and more of our customers and only port 80 is
open. 

My question is really what is the best way to work
around this problem? Is there a web-based application
out there that only does this simple job over port 80?
I have never seen this addressed here but I know we're
not the first ones to run into this issue. 


Thanks all for any help. 

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------