From: wcs@anchor.ho.att.com (bill.stewart@pleasantonca.ncr.com +1-510-484-6204)
Date: Fri, 18 Nov 94 16:39:13 PST
To: cypherpunks@toad.com
Subject: Re: anon ftp/mail
Message-ID: <9411190036.AA09039@anchor.ho.att.com>
MIME-Version: 1.0
Content-Type: text/plain


Jon writes:

> > Find someone who can give you a temp account that you can download 
> > from... ...something that will be erased. The only other way would be to 
> > hack out a copy of ftp to send false information
> 
>    Spoofing your DNS info, while certainly possible [ and this is 
> assuming lame admins, no identd, no tcpwrapper, etc. ] is probably not 
> the easiest way to go about it.  I have to believe that none of the 
> common ftpd's are brain-dead enough to trust nameservers extensively.

Some of them do, some of them don't, at least for anon-ftp.  I have accounts
behind two different kinds of firewalls - the accounts behind router-based
firewalls have difficulty with the FTP servers that authenticate using
RFC931 or DNS, since the firewall blocks them, while the accounts behind
the AT&T Firewall (ref. Cheswick and Bellovin) need to use proxy ftp clients,
but don't have trouble accessing the servers, which think (incorrectly)
that the requests are coming from the outside part of the firewall.

	Bill