How to Forge Email with Windows XP Telnet

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up my<br />techbroker.com (206.61.52.33) with user xyz, password guest for you to play with. Here's how to forge email to xyz@techbroker.com using<br />telnet. Start with the command:</span></div><a name="more"></a><o:p></o:p><br /> <div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet techbroker.com 25<br />Connecting To Techbroker.com<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">220 <techbroker.com> Service ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Now you type in who you want the message to appear to come from:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">helo santa@techbroker.com<br />Techbroker.com will answer:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">250 <techbroker.com> host ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Next type in your mail from address:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">mail from:santa@techbroker.com<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">250 Requested mail action okay, completed<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Your next command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">rcpt to:xyz@techbroker.com<br />250 Requested mail action okay, completed<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Your next command:<br />data<br />354 Start main input; end with <CRLF>.<CRLF><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Newbie note: <CRLF> just means hit return. In case you can't see that little period between the <CRLF>s, what you do to end composing your email is to hit enter, type a period, then hit enter again.</span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Anyhow, try typing:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">This is a test.<br />.<br />250 Requested mail action okay, completed<br />quit<br />221 <techbroker.com> Service closing transmission channel<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Connection to host lost.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Using techbroker's mail server, even if you enable full headers, the<br />message we just composed looks like:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Status: R<br />X-status: N<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">This is a test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">That's a pretty pathetic forged email, huh? No "from", no date.<br />However, you can make your headers better by using a trick with the data command. After you give it, you can insert as many headers as you choose. The trick is easier to show than explain:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">220 <techbroker.com> Service ready<br />helo santa@northpole.org<br />250 <techbroker.com> host ready<br />mail from:santa@northpole.com<br />250 Requested mail action okay, completed<br />rcpt to:<script language="JavaScript"><!-- var name = "cmeinel"; var domain = "techbroker.com"; document.write('<a href=\"mailto:' + name + '@' + domain + '\">'); document.write(name + '@' + domain + '</a>'); // --></script><br />250 Requested mail action okay, completed<br />data<br />354 Start main input; end with <CRLF>.<CRLF><br />from:santa@deer.northpole.org<br />Date: Mon, 21 Oct 2002 10:09:16 -0500<br />Subject: Rudolf<br />This is a Santa test.<br />.<br />250 Requested mail action okay, completed<br />quit<br />221 <techbroker.com> Service closing transmission channel<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Connection to host lost.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The message then looks like:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">from:santa@deer.northpole.org<br />Date: Mon, 21 Oct 2002 10:09:16 -0500<br />Subject: Rudolf<br />This is a Santa test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The trick is to start each line you want in the headers with one word<br />followed by a colon, and the a line followed by "return". As soon as<br />you write a line that doesn't begin this way, the rest of what you<br />type goes into the body of the email.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Notice that the santa@northpole.com from the "mail from:" command didn't show up in the header. Some mail servers would show both "from" addresses.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You can forge email on techbroker.com within one strict limitation.<br />Your email has to go to someone at techbroker.com. If you can find any way to send email to someone outside techbroker, let us know, because you will have broken our security, muhahaha! Don't worry, you have my permission.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Next, you can read the email you forge on techbroker.com via telnet:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet techbroker.com 110<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">+OK <30961.5910984301@techbroker.com> service ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Give this command:<br />user xyz<br />+OK user is known<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Then type in this:<br />pass test<br />+OK mail drop has 2 message(s)<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">retr 1<br />+OK message follows<br />This is a test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you want to know all possible commands, give this command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">help<br />+OK help list follows<br />USER user<br />PASS password<br />STAT<br />LIST [message]<br />RETR message<br />DELE message<br />NOOP<br />RSET<br />QUIT<br />APOP user md5<br />TOP message lines<br />UIDL [message]<br />HELP<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Unless you use a weird online provider like AOL, you can use these<br />same tricks to send and receive your own email. Or you can forge email to a friend by telnetting to his or her online provider's email<br />sending computer(s).<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div></div>

How to Forge Email with Windows XP Telnet

Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up my techbroke...

Read more »

How to Telnet with Windows XP

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The queen of hacker commands is telnet. To get Windows help for<br />telnet, in the cmd.exe window give the command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet /?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Here's what you will get:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet [-a][-e escape char][-f log file][-l user][-t term][host<br />[port]]<br />-a Attempt automatic logon. Same as -l option except uses<br />the currently logged on user's name.<br />-e Escape character to enter telnet client prompt.<br />-f File name for client side logging<br />-l Specifies the user name to log in with on the remote system.<br />Requires that the remote system support the TELNET ENVIRON<br />option.<br />-t Specifies terminal type.<br />Supported term types are vt100, vt52, ansi and vtnt only.<br />host Specifies the hostname or IP address of the remote computer<br />to connect to.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">port Specifies a port number or service name.</span></div><a name="more"></a><o:p></o:p><br /> <div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">****************<br /><span style="color: blue;">Newbie note: what is a port on a computer? A computer port is sort of like a seaport. It's where things can go in and/or out of a computer. Some ports are easy to understand, like keyboard, monitor, printer and modem. Other ports are virtual, meaning that they are created by software. When that modem port of yours (or LAN or ISDN or DSL) is connected to the Internet, your computer has the ability to open or close any of over 65,000 different virtual ports, and has the ability to connect to any of these on another computer - if it is running that port, and if a firewall doesn?t block it.</span><br />****************<br />****************<br /><span style="color: blue;">Newbie note: How do you address a computer over the Internet? There are two ways: by number or by name. </span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The simplest use of telnet is to log into a remote computer. Give the<br />command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:/>telnet targetcomputer.com (substituting the name of the computer you want to telnet into for targetcomputer.com)<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If this computer is set up to let people log into accounts, you may<br />get the message:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">login:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Type your user name here, making sure to be exact. You can't swap between lower case and capital letters. For example, user name Guest is not the same as guest.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">****************<br /><span style="color: blue;">Newbie note: Lots of people email me asking how to learn what their user name and password are. Stop laughing, darn it, they really do. If you don't know your user name and password, that means whoever runs that computer didn't give you an account and doesn't want you to log on.</span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Then comes the message:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Password:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Again, be exact in typing in your password.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">What if this doesn't work?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Every day people write to me complaining they can't telnet. That is<br />usually because they try to telnet into a computer, or a port on a<br />computer that is set up to refuse telnet connections. Here's what it<br />might look like when a computer refuses a telnet connection:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\ >telnet 10.0.0.3<br />Connecting To 10.0.0.3...Could not open connection to the host, on port 23. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or you might see:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\ >telnet techbroker.com<br />Connecting To techbroker.com...Could not open connection to the host, on port 23.<br />No connection could be made because the target machine actively<br />refused it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you just give the telnet command without giving a port number, it<br />will automatically try to connect on port 23, which sometimes runs a<br />telnet server.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">**************<br /><span style="color: blue;">Newbie note: your Windows computer has a telnet client program,<br />meaning it will let you telnet out of it. However you have to install<br />a telnet server before anyone can telnet into port 23 on your<br />computer.</span><br />*************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If telnet failed to connect, possibly the computer you were trying to<br />telnet into was down or just plain no longer in existence. Maybe the<br />people who run that computer don't want you to telnet into it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Telnet into a Shell Account</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Even though you can't telnet into an account inside some computer, often you can get some information back or get that computer to do something interesting for you. Yes, you can get a telnet connection to succeed -without doing anything illegal --against almost any computer, even if you don't have permission to log in. There are many legal things you can do to many randomly chosen computers with telnet. For example:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:/telnet freeshell.org 22<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">SSH-1.99-OpenSSH_3.4p1<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">That tells us the target computer is running an SSH server, which enables encrypted connections between computers. If you want to SSH into an account there, you can get a shell account for free at<br /><u><span style="color: blue;"><http://freeshell.org/></span></u> . You can get a free SSH client program from<br /><u><span style="color: blue;"><http://winfiles.com/></span></u> .<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">One reason most hackers have shell accounts on Internet servers is because you can meet the real hackers there. When you've logged in, give the command w or who. That gives a list of user names. You can talk to other users with tht talk command. Another fun thing, if your shell account allows it, is to give the command<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">ps -auxww<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">It might tell you what commands and processes other users are running. Ask other users what they are doing and they might teach you something. Just be careful not to be a pest!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">***************<br /><span style="color: red;">You can get punched in the nose warning: Your online provider might kick you off for making telnet probes of other computers. The solution is to get a local online provider and make friends with the people who run it, and convince them you are just doing harmless, legal explorations.</span><br />*************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Sometimes a port is running an interesting program, but a firewall won't let you in. For example, 10.0.0.3, a computer on my local area network, runs an email sending program, (sendmail working together with Postfix, and using Kmail to compose emails). I can use it from an account inside 10.0.0.3 to send emails with headers that hide from where I send things.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If I try to telnet to this email program from outside this computer,<br />here's what happens:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet 10.0.0.3 25<br />Connecting To 10.0.0.3...Could not open connection to the host, on<br />port 25.<br />No connection could be made because the target machine actively<br />refused it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">However, if I log into an account on 10.0.0.3 and then telnet from<br />inside to port 25, here's what I get:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Last login: Fri Oct 18 13:56:58 2002 from 10.0.0.1<br />Have a lot of fun...<br />cmeinel@test-box:~> telnet localhost 25<br />Trying ::1...<br />telnet: connect to address ::1: Connection refused<br />Trying 127.0.0.1... [Carolyn's note: 127.0.0.1 is the numerical<br />address meaning localhost, the same computer you are logged into]<br />Connected to localhost.<br />Escape character is '^]'.<br />220 test-box.local ESMTP Postfix<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The reason I keep this port 25 hidden behind a firewall is to keep<br />people from using it to try to break in or to forge email. Now the<br />ubergeniuses reading this will start to make fun of me because no<br />Internet address that begins with 10. is reachable from the Internet.<br />However, sometimes I place this "test-box" computer online with a<br />static Internet address, meaning whenever it is on the Internet, it<br />always has the same numerical address. I'm not going to tell you what its Internet address is because I don't want anyone messing with it. I just want to mess with other people's computers with it, muhahaha. That's also why I always keep my Internet address from showing up in the headers of my emails.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">***************<br /><span style="color: blue;">Newbie note: What is all this about headers? It's stuff at the<br />beginning of an email that may - or may not - tell you a lot about<br />where it came from and when. To see full headers, in Outlook click<br />view -> full headers. In Eudora, click the "Blah blah blah" icon.</span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div></div>

How to Telnet with Windows XP

The queen of hacker commands is telnet. To get Windows help for telnet, in the cmd.exe window give the command: C:\>telnet /? Here's ...

Read more »

Telnet: the Number One Hacker Tool

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">In this Guide you will learn:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">What is telnet?</span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to telnet</span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to get telnet accounts <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Why you might not want to telnet <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to install a telnet server on your home Windows computer <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to turn off a telnet server on your home Linux computer <begin11d.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to explore computers using telnet <begin11d.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Why not use a portscanner instead? <begin11f.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to break into web sites using telnet <begin11f.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">"Where do I type that command?" People ask that all the time when they read my early Guides to (mostly) Harmless Hacking. I wrote those guides back when the Internet was in its infancy and almost everyone in cyberspace used telnet. However, nowadays you might never even hear about telnet, much less use it, unless you are a hacker. So if you are still wondering about telnet, today is your lucky day.</span></div><a name="more"></a><o:p></o:p><br /> <div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">What Is Telnet?</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Telnet is a protocol that is most commonly used to log into a remote computer. It also is the single most powerful hacking tool on the planet. With just a telnet client program, you can:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">send email <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">download source code from web sites <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">send unexpected input to webservers that can give you amazing and sometimes illegal results <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">give arbitrary input to many other services on Internet host computers <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">probe the services offered by servers, routers and even people's home computers. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Don't know how to telnet? Click the easy telnet links at happyhacker.com and land in the middle of a real hacker wargame! This should work regardless of your computer operating system -- if you have an up to date browser, if your online service provider gives you a true Internet connection, and if your computer is able to telnet at all.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Did those links get you into a telnet session? Were you able to login to a remote computer? If yes, congratulations.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If not, how can you fix the problem? If no telnet program appeared on your monitor when you clicked these links, perhaps your browser is too ancient to allow telnet. Try installing the latest Netscape browser (<u><span style="color: blue;"><http://www.netscape.com/></span></u>). Or, perhaps your operating system does not include a telnet program. In that case, install or reinstall Windows 95 or 98. If you own a Mac, get the superb Mac OS X or Linux PPC (<u><span style="color: blue;"><http://www.linuxppc.com/></span></u>).<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If a telnet program came up and failed to connect, possibly the computer you were trying to telnet into was down or just plain no longer in existence. Or, you may be using America Online (or a similar extremely poor online service). If so, your simplest solution may be to get a better online service provider. Determined to hack using AOL? <u><span style="color: blue;">See http://happyhacker.org/aol.shtml <../aol.shtml></span></u> for some ways to make AOL give you a true Internet connection.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">OK, so you've managed to telnet for the first time. Presumably you don't want to limit yourself to telnet links on web sites. How do you telnet anywhere you want to go?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you have Linux or any other type of Unix (BSD, SCO, Solaris, Sun OS, Irix, Ultrix, etc.) telneting is easy. Just bring up "console" or "shell" (or whatever your GUI calls the command line interface). At the prompt type:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <hostname or IP address><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Windows 2000 works pretty much like Unix. See Figure 1 for an example of a Win 2000 telnet login. Not shown on the screen was the command "telnet 10.0.0.10", which I gave at the Command (MS-DOS) prompt.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Figure 1: Telnet using Windows 2000<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you have Windows 95, 98 or NT, to telnet, bring up the MS-DOS prompt (Start --> Programs --> MS-DOS). <br /><br />Click "connect" then "remote system…". In the host name box place the host name or IP address of the computer to which you wish to telnet. Leave the Port and Term Type boxes alone for now.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Here is a really important point. Every day people email me complaining that some computer won't let them telnet into it. They ask what they are doing wrong. They aren't doing anything wrong:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe the computer they are trying to reach no longer exists. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe the computer they are trying to reach doesn't allow telnet logins. For example, whois.internic.net no longer allows telnet logins on port 23 (the default port). <u><span style="color: blue;">Click here to learn how to telnet into whois.internic.net on the right port for that particular server. <../whois.shtml></span></u> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe a firewall is blocking them. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or maybe they make a telnet connection and the remote computer asks for a user name and password they don't have. Then they email me asking for how to get a login name and password that will work. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="color: magenta; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Newbie note: The owners or administrators of any Internet host computer decide who gets user names and passwords. Believe it or not, about once a week someone emails me asking what user name and password their own online service provider has assigned them for a telnet login. That's why I'm telling people the obvious -- if you want to telnet into any computer, and you don't have a user name and password, you must ask the owner, administrator of tech support for that system for a user name and password. If they won't give that to you, they don't want you to have it!</span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><i><span style="color: red; font-family: "Times New Roman","serif"; font-size: 12.0pt;">You can go to jail warning: If you guess the user name and password, or use a computer breakin technique to get or create them, or if someone other than an owner or administrator or a legitimate user on that system gives you a user name and password, it is against the law to use them. Many computer criminals give out user names and passwords that they obtained illegally.</span></i></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Get Telnet Accounts</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">OK, so you want to get legal user names and passwords so you can telnet into other computers. Here are some of the best ways:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">See <u><span style="color: blue;">http://happyhacker.org/links2.shtml#shells <../links2.shtml></span></u> for organizations that will give you free shell accounts. You can telnet into these. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Ask Internet Service Providers for shell accounts. Some offer them, although most don't. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Set up a telnet server on your own computer (see instructions below). Yes, once you are running a telnet server, you can telnet from your computer back into your computer. Simply give the command "telnet 127.0.0.1". <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><!--[endif]--><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Make friends with people who run Internet computers with telnet servers. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">Why you May Not Want to Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you love your shell account server, don't ever, ever telnet or ftp into it. I recommend Ssh or Openssh for logging into remote computers? The telnet (and ftp) protocol is a "clear text" transmission. That means that computer on the same LAN as either You or your destination computer, or any computer on any LAN or network path through which your connection passes can steal your login name, password or anything else that goes across your connection. Ssh and OpenSsh encrypt all communications so no one can snoop on you.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Install a Telnet Server on your Windows Computer</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Usually you can't telnet into a Windows home computer. The reason is, they aren't running telnet servers. Here's how to get a telnet server on your home Windows computers so your friends and you can telnet in and play.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For Windows NT, the Options Pack includes a primitive telnet server.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For Windows 95/98/NT and 2000, you also can install shareware or commercial telnet servers. Check out http://www.winfiles.com, or do a web search.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Of course installing a telnet server makes your computer vulnerable to all sorts of trouble from hackers. It's your funeral, don't come crying top me if a telnet visitor destroys your computer<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Turn off a Telnet Server on your Unix-type Computer</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you go online with Linux or other Unix-type computer, a telnet server is the easiest way to ensure you get destroyed by a malicious hacker. Here's how to prevent this. On most of these, the file /etc/inetd.conf launches most of your servers. Edit the file to put a "#" in front of the line that has telnet in it and either reboot your computer or kill and restart inetd.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If your computer doesn't use inetd to launch services, you should be able to find telnetd under /etc/init.d.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Install ssh instead and only use that to log into your shell account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Explore Computers Using Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Even if a computer doesn't have a telnet server, there are lots of fun and even legal things to do to it using telnet. The easiest thing to do is extract "banners" from a victim computer. A banner is a message a computer will often give when you telnet to a port that is running an Internet server of some sort.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For example, most mail sending servers use port 25. To telnet to port 25 from Win 2000 or a Unix shell, simply type:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <hostname or IP address> 25<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Windows 95, 98 and NT make it a tiny bit harder. <o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If the victim computer is running a mail server, you will see something that looks like this:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Whoa, look at that! The victim computer told us what operating system (Windows NT) and mail server (Mercur) it runs!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">A quick search of the Bugtraq archives at <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>revealed horrid things a criminal could do to that Mercur mail server. Since I think it is more fun to be nice, I told someone at the company using this mail server about the problems. He invited me to vacation at his beautiful Swiss home, where he and his wife keep horses and take long trail rides in the Alps. Golly, that is much more fun than breaking into a computer!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Right about now some elite ueberhaxorz are probably reading this and saying "What a lamer Meinel is! We can do the same thing by running nmap."<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">They are right, you can learn the same things by running a port scanning program such as nmap (available at <u><span style="color: blue;"><http://www.insecure.org/></span></u>). However, I am quite careful about under what circumstances I run any port scanner. In order to get information on what programs are running on what ports, you must run a port scanner in a mode that will probably convince the owner of the victim computer that you are a criminal. He or she may persuade your online service provider to cancel your account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The other reason to analyze computers using telnet is that you learn more. It's the difference between eating at McDonalds and learning how to cook.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><br /></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">A quick search of the Bugtraq archives at <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>revealed horrid things a criminal could do to that Mercur mail server. Since I think it is more fun to be nice, I told someone at the company using this mail server about the problems. He invited me to vacation at his beautiful Swiss home, where he and his wife keep horses and take long trail rides in the Alps. Golly, that is much more fun than breaking into a computer!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Right about now some elite ueberhaxorz are probably reading this and saying "What a lamer Meinel is! We can do the same thing by running nmap."<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">They are right, you can learn the same things by running a port scanning program such as nmap (available at <u><span style="color: blue;"><http://www.insecure.org/></span></u>). However, I am quite careful about under what circumstances I run any port scanner. In order to get information on what programs are running on what ports, you must run a port scanner in a mode that will probably convince the owner of the victim computer that you are a criminal. He or she may persuade your online service provider to cancel your account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The other reason to analyze computers using telnet is that you learn more. It's the difference between eating at McDonalds and learning how to cook.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Break into Web Sites Using Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You don't have to use a web browser to access files on a web site. All you need to do is:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <victimcomputer> 80<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or specify port 80 in a Windows telnet.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you are using Windows 95/98/NT, whenever you are NOT logging into a telnet account, you should enable local echo. Otherwise whatever you type in (unless you are in a telnet account) will not show on the screen. To enable local echo, click Terminal --> Preferences --> Local Echo.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">So how do you send stuff back to the webserver? Try this:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">GET / HTTP/1.0<br /><your command here><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">What kinds of commands can you send? The book <u><span style="color: blue;">Hackproofing Your Network <../bookstore/general.shtml></span></u> (by Ryan Russell of Securityfocus.com and Stance Cunningham) suggests a fun and harmless hack. Create and store a bogus cookie in the location on your web browser that stores cookies. (Find it by searching for the file "cookies.txt".) Name your bogus cookie something like "MyBogusCookie." Then telnet to the victim webserver and give something like this command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">GET / HTTP/1.0<br />User-Agent: HaveABogusCookieThisIsAJoke 123.4<br />Cookie: /; MyBogusCookie<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The <u><span style="color: blue;">Überhacker! -- How to Break into Computers <../uberhacker/index.shtml></span></u> book details a number of serious attacks you can perform through sending funny input to a webserver. Basically, you need to learn how to write shell programs, and then find ways to get them to be run by the webserver. I'm not going to explain them here, however. These attacks, when carried out against a vulnerable webserver, are so easy that little kids could do them, and I don't want to be responsible for their behavior. It's much harder for little kids to get a hold of Russell's and my books than it is for them to read this GTMHH on the Happy Hacker website.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">So are you dying to know what to send a webserver in order to break into it, without having to buy a book? Here are some hints. How to do this will depend on what webserver it is, what operating system it runs on, whether its security weaknesses have been fixed, and whether the web designer has used things such as Common Gateway Interface (CGI) or Server Side Includes (SSIs) that have weaknesses in them.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You will have to research these issues at Web sites that archive vulnerabilities and exploits such as <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>and <u><span style="color: blue;"><http://packestorm.securify.com/></span></u>. You will need to study web site programming (HTML -- hypertext markup language, CGI and SSIs) and shell programming. You will need to learn webserver commands (documented at <u><span style="color: blue;"><http://www.w3.org/hypertext/WWW/markup/Markup.html></span></u>). You will have to use your brain and be persistent.<o:p></o:p></span></div><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;">But at least if you come across a telnet exploit, now you know the answer to the question "where do I type that command?"</span></div>

Telnet: the Number One Hacker Tool

In this Guide you will learn: ·          What is telnet? ·          How to telnet ·          How to get telnet accounts <begin11c.shtml...

Read more »

Creating a Rule to Bypass the Web Proxy Filter in ISA Server or Forefront TMG

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">This is Keith Abluton with the Forefront Edge team at Microsoft. I had a case recently where a legacy application that was improperly coded was causing a critical situation for one of our customers. The application was used to send information to a server that was located on the Internet.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">I won't bore you with all of the details but the bottom line is that the application was not following </span><a href="http://www.ietf.org/rfc/rfc2616.txt"><span style="color: #0066dd; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman"; text-decoration: none; text-underline: none;">RFC 2616</span></a><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">(HTTP/1.1) and Forefront TMG was dropping some of the traffic coming back from the server. Since the RFC was not closely adhered to by the application, part of a response from the remote server was unexpected and TMG was dropping it.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Because of the mission critical nature of this application the customer didn't have time to go back to the legacy application developers and get them to fix their code. They needed a workaround to get the application working immediately.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Since the traffic in question was utilizing the HTTP protocol we needed to create a couple of rules on TMG to allow the traffic to pass without being evaluated by the Web Proxy Filter. Why would you want to bypass the Web Proxy Filter you ask? The filter will follow RFC and may drop, silently or otherwise, traffic that doesn’t follow RFC. You may find yourself in a similar situation so I wanted to lay out the instructions for doing this.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Here are the steps that we took to get this application working.</span><br /><a name="more"></a><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">1.) In the ISA/TMG MMC click on the <b>Firewall Policy</b> branch. In the far right choose the <b>Toolbox</b> tab and click on <b>Protocols</b>. (See Figure 1)<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-TkFA1MN5afs/UEicxzC9OFI/AAAAAAAAAtA/jlFEaM5SFvI/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-TkFA1MN5afs/UEicxzC9OFI/AAAAAAAAAtA/jlFEaM5SFvI/s1600/1.png" /></a></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; line-height: 18pt; text-align: center;"><b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Fig. 1</span></b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">2.) Under <b>Protocols</b> select <b>New</b>, then <b>Protocol</b>. This will start the <b>New Protocol Definition Wizard</b>. (See Figure 2)<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://4.bp.blogspot.com/-OMpmZX-1g6E/UEidB7uINwI/AAAAAAAAAtI/CXL4wRFLkFQ/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-OMpmZX-1g6E/UEidB7uINwI/AAAAAAAAAtI/CXL4wRFLkFQ/s1600/1.png" /></a></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; line-height: 18pt; text-align: center;"><b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Fig. 2</span></b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">2.) Under <b>"Protocol Definition Name"</b> give it something meaningful to you. I named mine HTTP_FilterUnbound. (See Figure 3)<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://2.bp.blogspot.com/-f5rFQlvvvEg/UEidOqNJQJI/AAAAAAAAAtQ/lbFn4reoyjY/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-f5rFQlvvvEg/UEidOqNJQJI/AAAAAAAAAtQ/lbFn4reoyjY/s1600/1.png" /></a></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; line-height: 18pt; text-align: center;"><b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Fig. 3</span></b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">3.) For the <b>Primary Connection Information</b> click on <b>New</b> and fill in the information as follows: <b>Protocol Type:</b> TCP , <b>Direction:</b> Outbound , <b>Port Range:</b> From: 80 To: 80 (See Figure 4)<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://2.bp.blogspot.com/-IE4fLQZajis/UEidYmMjnnI/AAAAAAAAAtY/NbxY2JQmX2U/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-IE4fLQZajis/UEidYmMjnnI/AAAAAAAAAtY/NbxY2JQmX2U/s1600/1.png" /></a></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; line-height: 18pt; text-align: center;"><b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Fig. 4</span></b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">5.) Click <b>Next</b> and choose "No" for the question <b>"Do you want to use secondary connections".</b> Choose <b>Finish</b>and then <b>Apply</b>.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">6.) Now create an Access Rule that will use this new User Defined Protocol. Keep in mind that you want to make this rule as specific as you can so that it only applies to the traffic you want to bypass the Web Proxy Filter. In my example I created a Computer Object with the IP address of the server that this application was communicating with. By doing this, all other traffic will be evaluated by your normal Web Access rules and will have the Web Proxy Filter applied to it.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">7.) Create a Deny Rule that is directly below the rule you just created in Step 6. The easiest way to do this is to copy the Access Rule and make a few changes to it. Change it to a Deny rule and change the Protocol to be the normal HTTP protocol. There is a specific reason for creating this Deny Rule. ISA/TMG will evaluate the rules in order from top to bottom. Unless it hits this Deny rule, it will continue down your rules list. If it finds another rule that matches the criteria AND uses the Web Proxy Filter, it will use that rule instead. Because we have the Deny Rule immediately below it, this will not occur. The rule you created in Step 6 will be applied to the traffic. If this rule were not in place, it would have continued down to my default Internet Access rule and the Web Proxy Filter would have been applied. The result would be that the application would still fail.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">8.) I moved both these rules up to the top of the list to make sure they were being applied before my default Internet Access rule. (See Figure 5)<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://2.bp.blogspot.com/-hOD3yqVJilI/UEidlKLb2QI/AAAAAAAAAtg/VYODOFk9RV4/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-hOD3yqVJilI/UEidlKLb2QI/AAAAAAAAAtg/VYODOFk9RV4/s1600/1.png" /></a></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; line-height: 18pt; text-align: center;"><b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">Fig. 5</span></b><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";">In this particular communications for a third party application that wasn’t following RFC for the HTTP Protocol was being dropped by TMG. The customer had an immediate need for a workaround. By creating a rule with a custom protocol that did not apply the Web Proxy Filter we were able to provide some relief to the customer. Keep in mind that there are some potential security ramifications using this approach and it should only be used sparingly and care should be taken to make sure the newly created rule is only being applied to the traffic for which it was intended. In any case, the best resolution would be to work with the vendor of the application to fix their coding to follow the RFC more strictly.<o:p></o:p></span></div><div class="MsoNormal" style="background: white; line-height: 18.0pt; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto;"><span style="color: #333333; font-family: "Segoe UI","sans-serif"; font-size: 9.0pt; mso-fareast-font-family: "Times New Roman";"><br /></span></div><!----><br /><br /><br /><br /><br /><!----></div>

Creating a Rule to Bypass the Web Proxy Filter in ISA Server or Forefront TMG

This is Keith Abluton with the Forefront Edge team at Microsoft. I had a case recently where a legacy application that was improperly coded ...

Read more »

Build a Home FTP Server with FileZilla

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Upload and download files on your home PC from anywhere by turning it into a personal FTP server. With a home FTP server, you can upload and download files on your home hard drive from the office, your friend's house, or to your laptop while you're on the road using any FTP client. Setting up an FTP server may sound like a complicated undertaking only system administrators can handle, but it's actually quite easy and free with open source software <a href="http://filezilla-project.org/"><span style="border: none windowtext 1.0pt; color: #719602; mso-border-alt: none windowtext 0in; padding: 0in;">FileZilla</span></a>. You've already heard of</span><a href="http://lifehacker.com/software/notag/ftp-file-transfer-across-platforms-with-filezilla-30-298687.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">FileZilla's FTP client application</span></a><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">, but the FileZilla project also offers a server application for Windows. Today we'll build an FTP server on your Windows PC with FileZilla for easy file transfers from any computer.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><i><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Note: Back in '05, guest poster Matt Haughey covered how to </span></i><a href="http://lifehacker.com/software/home-server/how-to-set-up-a-home-ftp-server-130806.php"><i><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">set up an FTP server using Serv-U FTP</span></i></a><i><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">—which is a fine commercial application, but its personal edition limits how many users can log into your server. We love our open source software, which is why we're taking a look at FileZilla, which has all the features, with none of the price tag or limits.</span></i><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><i><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><br /></span></i></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 16.0pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Install the FileZilla FTP Server<o:p></o:p></span></b></div><br /><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">The FileZilla server installation is a regular Windows "just press Next" wizard, and for most users, the suggested default settings will work. However, let's take a look at its initial settings anyway, since they'll affect how you work with your server. Here's how to get FileZilla going:</span><br /><a name="more"></a><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><!--[if !supportLists]--><span style="color: #222222; font-family: Wingdings; font-size: 10.0pt; mso-bidi-font-family: Wingdings; mso-bidi-font-size: 11.5pt; mso-fareast-font-family: Wingdings;">§<span style="font: 7.0pt "Times New Roman";">  </span></span><!--[endif]--><a href="http://filezilla-project.org/download.php?type=server"><b><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">Download the FileZilla server application</span></b></a><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">.</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> Even though the FileZilla FTP client is available for multiple operating systems, the server app is Windows-only (and works for Windows XP, Vista and 2000). </span><a href="http://filezilla-project.org/download.php?type=server"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">Download it</span></a><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> and kick off the installation wizard. As of this writing, the latest server version is 0.9.25.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 6pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><!--[if !supportLists]--><span style="color: #222222; font-family: Wingdings; font-size: 10.0pt; mso-bidi-font-family: Wingdings; mso-bidi-font-size: 11.5pt; mso-fareast-font-family: Wingdings;">§<span style="font: 7.0pt "Times New Roman";">  </span></span><!--[endif]--><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Run the server as a Windows Service.</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> First FileZilla will give you the option of how it should start up: as a Windows service or not, automatically or manually. Windows services are processes that run on your PC which you can manage from the Services management pane. There's more on how to manage that below, but at this point, running FileZilla as a Windows service that runs automatically is the default option. If you want your FTP server on by default, choose "Start as service, started automatically (default)" as shown. Otherwise, choose "Start as service, started manually."</span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://4.bp.blogspot.com/-JTeagLPX3Q8/UEiK7-sG5UI/AAAAAAAAAsY/Iez2vLPvxJ0/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-JTeagLPX3Q8/UEiK7-sG5UI/AAAAAAAAAsY/Iez2vLPvxJ0/s1600/1.png" /></a></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 6pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><br /></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman"; mso-no-proof: yes;"><v:shapetype coordsize="21600,21600" filled="f" id="_x0000_t75" o:preferrelative="t" o:spt="75" path="m@4@5l@4@11@9@11@9@5xe" stroked="f"> <v:stroke joinstyle="miter"> <v:formulas> <v:f eqn="if lineDrawn pixelLineWidth 0"> <v:f eqn="sum @0 1 0"> <v:f eqn="sum 0 0 @1"> <v:f eqn="prod @2 1 2"> <v:f eqn="prod @3 21600 pixelWidth"> <v:f eqn="prod @3 21600 pixelHeight"> <v:f eqn="sum @0 0 1"> <v:f eqn="prod @6 1 2"> <v:f eqn="prod @7 21600 pixelWidth"> <v:f eqn="sum @8 21600 0"> <v:f eqn="prod @7 21600 pixelHeight"> <v:f eqn="sum @10 21600 0"> </v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:formulas> <v:path gradientshapeok="t" o:connecttype="rect" o:extrusionok="f"> <o:lock aspectratio="t" v:ext="edit"></o:lock></v:path></v:stroke></v:shapetype><v:shape alt="Description: Build a Home FTP Server with FileZilla" id="Picture_x0020_6" o:spid="_x0000_i1025" style="height: 175.5pt; mso-wrap-style: square; visibility: visible; width: 225pt;" type="#_x0000_t75"> <v:imagedata o:title="Build a Home FTP Server with FileZilla" src="file:///C:\Users\amitkng\AppData\Local\Temp\msohtmlclip1\01\clip_image001.png"></v:imagedata></v:shape></span><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">In this pane you'll also set the port for the admin interface to use. By default it's 14147, and you're most likely safe leaving it at that. If you do change that port number, make a note of what it is—you'll need it to connect to the server later on.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 6pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><!--[if !supportLists]--><span style="color: #222222; font-family: Wingdings; font-size: 10.0pt; mso-bidi-font-family: Wingdings; mso-bidi-font-size: 11.5pt; mso-fareast-font-family: Wingdings;">§<span style="font: 7.0pt "Times New Roman";">  </span></span><!--[endif]--><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Set the server administrative interface to launch automatically (or not).</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> On the final installation dialog, choose whether you want the server admin window to launch automatically when the current Windows user logs on, when any user logs on, or if it should be started manually.<o:p></o:p></span></div><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">Run and connect to the server with the admin interface.</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;"> As the installation wizard completes, set it to start the server admin interface. This is the window where you'll configure your server and monitor its activity. The first time you run the admin interface, it will ask you for the server's address and port. Since the server is running on your PC—the same one the admin interface is running on—its address is </span><span style="border: none windowtext 1.0pt; color: #222222; font-family: "Courier New"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; padding: 0in;">localhost</span><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">, or </span><span style="border: none windowtext 1.0pt; color: #222222; font-family: "Courier New"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; padding: 0in;">127.0.0.1</span><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">. The default port is 14147 (or whatever you may have changed it to, as noted above), as shown:</span><!--EndFragment--><br /><!----><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-pZmXd0JlzC0/UEiLSYnketI/AAAAAAAAAsg/GxLnQhlQKis/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-pZmXd0JlzC0/UEiLSYnketI/AAAAAAAAAsg/GxLnQhlQKis/s1600/2.png" /></a></div><div class="separator" style="clear: both; text-align: left;"></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">If this is the only FTP server you'll be administering (most likely it is), check off the "Always connect to this server" box to bypass this dialog in the future.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; margin-left: 0in; margin-right: 0in; margin-top: 13.5pt; vertical-align: baseline;"><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 16.0pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Create Server Users<o:p></o:p></span></b></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">If all's gone well, your server's up and running—but no one can use it yet, since you haven't given anyone permission. To set up a server user, from the Edit menu choose Users. In the Users dialog on the right hand side, hit the Add button to create a new user and assign a password. Then, on the left side, select "Shared Folders" to set what folders that user will have access to on your server. Here I've created a user named gina and granted read access to the</span><span style="border: none windowtext 1.0pt; color: #333333; font-family: "Courier New"; font-size: 11.5pt; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">C:\data\</span><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> directory.<o:p></o:p></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-pxgrurtMLNM/UEiLvN1bJdI/AAAAAAAAAso/RulYRNzz2uI/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-pxgrurtMLNM/UEiLvN1bJdI/AAAAAAAAAso/RulYRNzz2uI/s1600/3.png" /></a></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Notice you can fine-tune file access rights for each user: grant read-only rights (download only), write rights (to upload files), and whether or not the user can delete files or create directories, too.<o:p></o:p></span></div><br /><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">If you want to grant several users access to your server all with the same rights and directory access, instead of creating each one individually, set up a user group. For example, if you're sharing your MP3 directory with friends, make a user group called "music fans" with access to the correct directory and add users to that group, which automatically gives them those rights. Then, if you move your music directory you only have to edit the group, not each user in it. To manage user groups, from the Edit menu, choose Groups.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; margin-left: 0in; margin-right: 0in; margin-top: 13.5pt; vertical-align: baseline;"><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 16.0pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Log into the Server<o:p></o:p></span></b></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Now that the server's up and running with users, it's time to log in and try uploading and downloading. Using any FTP client (like the <a href="http://lifehacker.com/software/notag/ftp-file-transfer-across-platforms-with-filezilla-30-298687.php"><span style="border: none windowtext 1.0pt; color: #719602; mso-border-alt: none windowtext 0in; padding: 0in;">FileZilla client</span></a> or <a href="http://lifehacker.com/software/ftp/download-of-the-day-fireftp-firefox-229824.php"><span style="border: none windowtext 1.0pt; color: #719602; mso-border-alt: none windowtext 0in; padding: 0in;">FireFTP for Firefox</span></a>) enter the server address, user name and password.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><!--[if !supportLists]--><span style="color: #222222; font-family: Wingdings; font-size: 10.0pt; mso-bidi-font-family: Wingdings; mso-bidi-font-size: 11.5pt; mso-fareast-font-family: Wingdings;">§<span style="font: 7.0pt "Times New Roman";">  </span></span><!--[endif]--><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Server address</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> If you're FTP'ing across your home network (like from your upstairs PC to your bedroom PC), you can reach the server by using its <i>internal</i> network address (most likely something like </span><span style="border: none windowtext 1.0pt; color: #222222; font-family: "Courier New"; font-size: 11.5pt; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">192.168.xx.xx</span><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">.) From the command line, type </span><span style="border: none windowtext 1.0pt; color: #222222; font-family: "Courier New"; font-size: 11.5pt; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">ipconfig</span><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> to see what that address is. If you want to log into your FTP server over the internet, set up a memorable URL for it and allow connections from outside your network. To do so, check out </span><a href="http://lifehacker.com/software/web-publishing/geek-to-live--how-to-assign-a-domain-name-to-your-home-web-server-124804.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">how to assign a domain name to your home server</span></a><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> and </span><a href="http://lifehacker.com/software/top/geek-to-live--how-to-access-a-home-server-behind-a-routerfirewall-127276.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">how to access your home server behind a router and firewall</span></a><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 6pt; margin-left: 24pt; margin-right: 0in; margin-top: 0in; text-indent: -0.25in; vertical-align: baseline;"><!--[if !supportLists]--><span style="color: #222222; font-family: Wingdings; font-size: 10.0pt; mso-bidi-font-family: Wingdings; mso-bidi-font-size: 11.5pt; mso-fareast-font-family: Wingdings;">§<span style="font: 7.0pt "Times New Roman";">  </span></span><!--[endif]--><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">User name and password</span></b><span style="color: #222222; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> This is one of the users you set up in FileZilla's admin interface, <i>not</i> the server admin user name. If friends, family, and co-workers will be logging into your FTP server, give them each a their specific username and password to log in (along with the server address.)<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Use your FTP server to fetch files stored at home from anywhere, share files with friends and family, or back up files across your network. (Free backup software SyncBack supports backup over FTP. Here's more on </span><a href="http://lifehacker.com/software/geek-to-live/geek-to-live-automatically-back-up-your-hard-drive-147855.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">how to use Syncback</span></a><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">.)<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 0.0001pt; vertical-align: baseline;"><b><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">A word about security:</span></b><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> FTP is not a secure protocol; all the file transfers happen in the clear, which makes them ripe for sniffing. FileZilla does support encrypted FTP access, and we recommend using that or a </span><a href="http://lifehacker.com/software/vpn/geek-to-live--create-your-own-virtual-private-network-with-hamachi-201786.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">VPN like Hamachi</span></a><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"> to secure file transfers over the internet. FileZilla's secure FTP server setup is beyond the scope of this article, but you can go into the server admin interface's settings area to configure it.<o:p></o:p></span></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; margin-left: 0in; margin-right: 0in; margin-top: 13.5pt; vertical-align: baseline;"><b><span style="color: #222222; font-family: "inherit","serif"; font-size: 16.0pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Starting and Stopping Your Server in Windows Services<o:p></o:p></span></b></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";">Finally, to shut down or restart your FileZilla server running as a Windows service, from Control Panel, Administrative Tools, launch Services. Right-click on the FileZilla FTP Server item on the list to stop it, edit its Properties, or restart it, as shown.</span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-vtnymgZaeIA/UEiMNl_g9MI/AAAAAAAAAsw/hZnDmsN9doY/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="183" src="http://1.bp.blogspot.com/-vtnymgZaeIA/UEiMNl_g9MI/AAAAAAAAAsw/hZnDmsN9doY/s320/4.png" width="320" /></a></div><div class="MsoNormal" style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; margin-bottom: 9.75pt; vertical-align: baseline;"><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">Other home servers you can set up yourself include a </span><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><a href="http://www.lifehacker.com/software/feature/how-to-set-up-a-personal-home-web-server-124212.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">home web server with Apache</span></a></span><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">, a</span><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><a href="http://lifehacker.com/software/home-server/geek-to-live--set-up-a-personal-home-ssh-server-205090.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">home SSH server</span></a></span><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;"> with Cygwin and a </span><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><a href="http://www.lifehacker.com/software/feature/geek-to-live--how-to-control-your-home-computer-from-anywhere-125607.php"><span style="border: none windowtext 1.0pt; color: #719602; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">home VNC server</span></a></span><span style="color: #333333; font-family: "inherit","serif"; font-size: 11.5pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;"> to remote control your computer.</span></div><br /></div>

Build a Home FTP Server with FileZilla

Upload and download files on your home PC from anywhere by turning it into a personal FTP server. With a home FTP server, you can upload and...

Read more »