Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: psoren on November 17, 2013, 10:07:46 AM

Title: FTP server behind SME
Post by: psoren on November 17, 2013, 10:07:46 AM
Hi,

I need to have a FTP server behind my SME server.
The users needs it to upload large grafic files and i don't want to add all those users to the main SME gateway.

I am using vSphere V5 with SME8 as gateway and a couple of other servers behind it, so i can add another easy.

So should i use another SME install or should i get a dedicated distro for FTP server, and which?

Also, can i forward port 21 for FTP to the server behind main SME even if it's also used on the main SME?

Thanks

Per
Title: Re: FTP server behind SME
Post by: mmccarn on November 17, 2013, 03:56:53 PM
Here's a write-up on active-vs-passive FTP, with some description of the associated firewall complications:
http://slacksite.com/other/ftp.html

As I remember, to have an FTP server behind your SME server, you'll need to:

- configure the internal ftp server to use only a limited range of ports for the data communications
- forward tcp 21 and udp 20 from the SME to the internal FTP server
- forward the configured range of FTP data ports from the SME to the internal FTP server

...then you get to deal with the security problems inherent in FTP.

For simplicity, I would probably use one of the many home NAS devices that includes a built-in FTP server.

If you can find a NAS device that supports ftps (ftp over ssl) or sftp (ftp over ssh), I think your firewall configuration is greatly simplified:
https://www.google.com/search?q=%28netgear+OR+buffalo+OR+Seagate+OR+Maxtor%29+AND+%28+sftp+OR+ftps%29

[you're not asking but]
I would tend to solve this problem using Dropbox, Google Drive, Owncloud (http://wiki.contribs.org/OwnCloud), Webshare (http://wiki.contribs.org/Webshare) or WebDAV (http://wiki.contribs.org/DAV)
[/you're not asking but]
Title: Re: FTP server behind SME
Post by: janet on November 18, 2013, 12:13:13 AM
mmccarn, psoren

Quote
[you're not asking but]
I would tend to solve this problem using Dropbox, Google Drive, Owncloud (http://wiki.contribs.org/OwnCloud), Webshare (http://wiki.contribs.org/Webshare) or WebDAV (http://wiki.contribs.org/DAV)
[/you're not asking but]

While not being asked, I'd agree with that approach also.
Title: Re: FTP server behind SME
Post by: psoren on November 18, 2013, 08:20:09 AM
Quote from: janet on November 18, 2013, 12:13:13 AM
mmccarn, psoren

While not being asked, I'd agree with that approach also.

Thanks for the replies,

I am looking into the options but each user must not see the others files from other users, i think FTP is the best way to manage that.
I have installed FreeNAS to have a look at that.

Per
Title: Re: FTP server behind SME
Post by: janet on November 18, 2013, 03:58:23 PM
psoren

Webshare has the ability to configure different users who have their own upload/download area.

Owncloud allows users to be added, but not sure if it creates different upload/download areas, still testing.

FTP is insecure, so why even consider using it.
Title: Re: FTP server behind SME
Post by: CharlieBrady on November 18, 2013, 07:02:34 PM
Quote from: psoren on November 17, 2013, 10:07:46 AM
I need to have a FTP server behind my SME server.

I'm sure you don't "need" that. Find another solution. This one is certainly more trouble than it is worth.
Title: Re: FTP server behind SME
Post by: psoren on November 18, 2013, 09:35:08 PM
Quote from: CharlieBrady on November 18, 2013, 07:02:34 PM
I'm sure you don't "need" that. Find another solution. This one is certainly more trouble than it is worth.

Correct. I wil instead use the webshare contrib. I just tested it on another server, and it can do exactly what i need.

Thanks for the help all :-)

Per