FTP / 2degrees IP address only

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › FTP / 2degrees IP address only

michael001

160 posts

Master Geek
Inactive user

#87335 26-Jul-2011 12:18

Hi,

I have a FileZilla FTP server setup at home and want to access this server by my android phone on 2degrees only.

I guess I wont always have the same IP address on my phone so I would like to add all the 2degrees IP address ranges (or possibly NZ only if I cant get these) to the whitelist to restrict access somewhat.

Does anyone know where to find the IP information?

Cheers,
Michael.

1 | 2

19282 posts

Uber Geek
Inactive user

#497969 26-Jul-2011 12:25

Hi Michael

I don't want to answer for 2Degrees on this question, But you are going about this not the best way.

IP ranges always change and then you will be asking them once a month for the new ranges,

This is why I don't give out the Vodafone NZ range it's not cause of security but the range is not static

John

michael001

160 posts

Master Geek
Inactive user

#497974 26-Jul-2011 12:30

Ahh darn.

I have a pretty secure password and such, but the thought of some new vulnerability in my particular choice of FTP server worries me when the world can gain access to the server.

If you wanted an FTP server on your home setup and needed full access to it from your mobile only, how would you tackle it?

Michael

pwner

423 posts

Ultimate Geek

Trusted

2degrees

#497998 26-Jul-2011 13:13

I would suggest using SCP rather than FTP that way you can use your SSH certificates rather than passwords at all.

Any posts are personal comments and not that of my employer

vita

68 posts

Master Geek

#498033 26-Jul-2011 14:28

Can you setup to do MAC filtering, only allow the MAC address of your devices

pwner

423 posts

Ultimate Geek

Trusted

2degrees

#498035 26-Jul-2011 14:30

vita: Can you setup to do MAC filtering, only allow the MAC address of your devices

Unless your program sends through your MAC addresses specially it wont work. MAC addresses are only used within the directly connected Layer2 area. Once you hit the first IP Gateway then your local machine MAC will be removed.

Any posts are personal comments and not that of my employer

michael001

160 posts

Master Geek
Inactive user

#498037 26-Jul-2011 14:33

Yeah. I had hoped you could filter at the router as well, but no luck there.

FTP is a pretty old piece of software, I'm now looking at SFTP options as you first suggested.

kyhwana2

2566 posts

Uber Geek

#498041 26-Jul-2011 14:39

As someone else suggested, use sftp instead. You shouldn't be using FTP for anything about anonymous read access :)

Have a look at filezilla server. http://filezilla-project.org/

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

michael001

160 posts

Master Geek
Inactive user

#498054 26-Jul-2011 15:05

FileZilla supports SFTP in the client only, not the server.

Whatever the case, thanks for everyones help I think I've found a possible solution. http://www.itefix.no/i2/copssh

Just the in the process of testing.

Zeon

3916 posts

Uber Geek

Trusted

#498074 26-Jul-2011 15:35

FTP is fine lol. Unless you have top secret CIA documents I seriously wouldn't be concerned. The chances of it being snooped between your ISP and 2degrees are virtually nil.

Speedtest 2019-10-14

michael001

160 posts

Master Geek
Inactive user

#498107 26-Jul-2011 16:28

How do you know I have those documents!?

SaltyNZ

8233 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#498112 26-Jul-2011 16:38

We decoded the secret data hidden in the EXIF info of your profile pic, GP Man.

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

th3r3turn

258 posts

Ultimate Geek
Inactive user

#498256 26-Jul-2011 21:55

ok why dont you use http://www.dyndns.com/, this will get you a static IP address.

insane

3240 posts

Uber Geek

ID Verified

Trusted

#498278 26-Jul-2011 22:53

th3r3turn: ok why dont you use http://www.dyndns.com/, this will get you a static IP address.

That will give some device a static hostname which points to a dynamic IP address. That won't give his 2degrees phone a static IP :)

Which branches into another question, does 2degrees offer static IP addresses and if so how much does it cost per month?

th3r3turn

258 posts

Ultimate Geek
Inactive user

#498333 27-Jul-2011 07:48

oh ok then what about this,

http://www.ipaddresslocation.org/ip_ranges/get_ranges.php

you can select NZ.

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#498552 27-Jul-2011 15:40

I suppose he's looking for a 2D version of this post from nealr for XT. But I however agree with JohnR here that Source IP "security" is a poor way of securing access. It does however help to cut down on the noise.

Google does have a few SSH Server options for windows.

Which is what I would recommend and using keys rather than passwords to authenticate.

1 | 2