Topic: Secure FTP

[David Bakody]

Is it possible to access files in our ibays remotely via some sort of secure FTP, but have it work seemlessly from a windows 2000 client?

We have a real need to access certain files from home on our office e-smith server, but leaving FTP open seems a bit risky to me.  Since we're using Windows 2000 clients, that seems to rule out joining the e-smith PDC remotely.

Any products or add-ons to e-smith that would accomplish this?  From my understanding, openSSH, etc, are mostly for secure telnetting, etc.

[Damien Curtain]

David Bakody wrote:

> Any products or add-ons to e-smith that would accomplish this?
> From my understanding, openSSH, etc, are mostly for secure
> telnetting, etc.

you can use ssh to do portforwarding, windows implementations such as mindterm make this easy, so its not just unix clients that can do this, just set up a local port to forward to your server (im sure your aware of security precausions) and then connect to your localhost eg ftp 127.0.0.1 2121 and have local port 2121 forward over ssh to your servers ftp.

--
 Damien

[Gordon Rowell]

Damien Curtain wrote:

> [...]
> you can use ssh to do portforwarding, windows implementations
> such as mindterm make this easy, so its not just unix clients
> that can do this, just set up a local port to forward to your
> server (im sure your aware of security precausions) and then
> connect to your localhost eg ftp 127.0.0.1 2121 and have local
> port 2121 forward over ssh to your servers ftp.

Just be aware that forwarding the control channel (port 21) is fairly
easy, but forwarding the data channel (negotiated on port 20) is not.
I.e. an SSH port forward will protect the username/password (which is good),
but will not protect the data (which may or may not be an issue, depending
on your application).

Gordon

[David Bakody]

Thanks for the good advice.  I will explore this and see if I can make it work in such a way that everyone in the office will be able to understand it.

[Michael Ray]

You could install a win32 port of scp on your windows 2000 client and scopy the files.