Hi All,
We are trying to add additional feature in our project which involves file transfer between two machines. Currently the transfer is between a remote ftp server machine to a local system and vice versa using a client application installed locally.
Now we are analyzing the feasibility to initiate file transfer between two remote ftp server machines without routing the file through a client connection. We have identified FXP (File eXchange Protocol) to be utilized to achieve the functionality.Is there any alternate approach to achieve the functionality rather than using FXP. FXP has a known vulnerability on exploiting ftp server termed FTP bounce.
We have the ftp service hosted on Unix machine.
I want to know some more details about FXP
1. Are there any jars available with the implementation of FXP?
2. Can we transfer multiple files in a unit of work using FXP ( transfer many files in a single transaction )?
3. Can we have Checksum matching, Checkpoint, Auditlog and Resume functionalities in FXP?
4. Can we implement security features like 128 bit encryption/ 256 bit encryption etc in FXP?
5. Is there any solution to overcome the security threat posed by PORT/ PASV commands?
Your points and directions in using FXP or an alternate approach is very much appreciated. Will JXTA or SCP will serve our purpose?
Thanks,
Suresh
