Core FTP

---------------------

Uncheck the "PASV" command in your site profile

The mini server does *not* utilize libssh - it is not used in Core FTP mini server

What would be needed is a test demonstrating that the same issue occurs with the mini server to verify this issue actually exists.

This looks to be a libssh issue and may not apply to Core FTP software.

If there is an example of this bypass, please forward to feedback at coreftp.com

-key <c:\path\keyfilename>

In looking at the error it looks like the site profile is not being found as the hostname isn't correct. If you switch to "file based storage" it will likely alleviate these issues.

https://coreftp.com/forums/viewtopic.php?t=4022670

Build 770 may fix this issue that was introduced in build 761.

Cumulative updates from builds 764-770

Fixes an error introduced in 2.34 that may have caused stat issues for some clients.

The user may be exceeding the "max conns per IP" setting. You can increase it on a per user basis in the user's "general" - "limit # of logins" setting.

There is also the "Always allow login" option also but use with caution.

----------

A recent test with the import function reveals some issues that are fixed as of build 769.

-----------------------

---------------

................

---------------

1) -c config.json (does this need a full path?)

2) Try the call without the cmd.exe /c portion.

3) echo %ProgramFiles% out to a file to verify the environment variable is accurate.

If none of these helps then this will be tested further.

There is a global option (view - options - view/edit), "Update edited files on save".

If checked (may require restart), does it change the behavior?

------------------

-----------------

--------

------------------------

Cumulative updates from builds 753-761

This seems to only apply to Linux. Wouldn't be concerned until it is replicated in Windows.

CVE-2024-6387

The reason to use PGP is so nobody but the intended end user can access a file because it is encrypted.

PGP shouldn't be used on the server, its essentially removing the security it provides.

Try unchecking the "PASV" option. If that doesn't work, post the client log showing the error.

----------------

------------------------------

Option added to build 1987 and greater

Install right over your existing setup. As of this post all versions use the same configuration data. Before installing you can backup the following settings for peace of mind: CoreFTPServer\config.dat CoreFTPServer\certs\ -- (copy entire directory, location may also vary, and can be retrieved from ...

--------------------------

---------------------------------

Password should be in the Advanced -> ssh -> password

Check Advanced -> General -> Do'nt prompt for password when empty (checked)

What is the command line you are using....?

Not sure this is an option but it should use the password in your site profile (under advanced -> ssh)

-------------------------

---------------------------

----------------

Update: Build 752 and greater removes -etm hmacs for any default settings.

Cumulative updates from builds 749-752

The Terrapin attack tool indicates ChaCha20 should be avoided. It is not available by default in Core FTP Server and needs to be added manually, so in most cases no action will be needed. If already added, then it should be removed under the "cipher algorithms" settings (SSH/SFTP - "....

add -o for overwrite.

the HTTP protocol may not be available on the new server. Try FTP (with the "AUTH TLS" connection type) on port 21, or SSH/SFTP on port 22.

Search found 957 matches