Securing FTP transfers can be done using several methods. FTP was not designed as a secure protocol. This being said, it is always a good idea to take steps towards ensuring your site’s security! Below I’ll go over a couple of easy ways to keep your ftp transfers secure.
Creating ftp.allow/deny files.
This method is used when you are hosting on a Linux server. When ever a ftp session is started, the ftp client searches the home directory for an ftp.allow to see if the IP address your are connecting from is allowed in. If your IP address is permitted or on the allow list then you are allowed to connect. If this ftp.allow file is not found however then another check is performed. This next check looks for a file name ftp.deny. If your IP address is found on this ftp.deny file you are not able to connect.
These files must be created as they are not present by default. Below I’ll go through the steps to create these files.
1. Access your customer control panel.
2. Choose File Manager. This will take you to the home directory via webshell
3. While in the home directory click on the File option
4. OK so now you get to choose which IP addresses are to be allowed ftp access. Each IP address will need to be on a separate line. Say you only want to allow your home address for example. To do this you would only have one line with your home IP address. If you do not know your current IP address click here.(https://www.whatismyip.com/) Change the name to ftp.allow. Then you’ll add your allowed IP addresses. After making a line for each IP click the save button.
5. Next repeat step 3. This time we are changing the file name to ftp.deny. This time in the body of the text you’ll add a line for each IP you want to block. Be sure to save.
If you wanted to block ALL IP addresses that are not on the ftp.allow list make your ftp.deny file.
If you were to block a specific set of IP addresses you can also do the same.
Now if your on a Windows server the process is almost identical. The only difference being you only need one file. This file is known as a .winftpaccess file
