Re: SSH and pure ftp

I already get one copy of your message (from the list) I don't need a second 
in my inbox. :)

On Friday 02 December 2005 11:24 am, Eric Peers wrote:
> First, apologies for my ignorance on the subject.  I'm looking to
> create a secure connection between the ftp server and the client. SSH
> works fine on its own, however, I don't have any of the nice lock down
> features available as I do using pure-ftp.  So, what I want to do is
> use pure-ftp through a SSH tunnel.

since the FTP protocol uses out-of-band data transfers, I don't believe this 
is possible, pure-ftpd or otherwise.  It theoretically could be possible if 
your client was smart enough to know to set up its own tunnels and such, but 
I highly doubt there are any clients out there to do this.

> Anyway, a lot of this is new to me, so there is probably another way
> to achieve the same results using SSH alone.

you said you're just trying to secure the connection between the client and 
the server.. but you can't use ssh because you need pure-ftpd's lockdown 
features?  What are you referring to?  You can run sshd inside a chroot and 
allow access to only the files you wish users to have access to, etc.

Also, if you have a limited number of clients connecting from a limited number 
of places (perhaps you have your ftp server in one location and need to 
access it from clients at 3 separate office locations) you could set up an 
IPSec tunnel between the client network and the ftp server (the machine it's 
not, not pure-ftpd itself) .. but that's a bit more complicated ;)

If you could describe exactly what your needs are, perhaps we can suggest a 
solution.

-Jeremy

-- 
Jeremy Kitchen ++ [email protected]

In the beginning was The Word and The Word was Content-type: text/plain
  -- The Word of Bob.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDkKJ7yBTJv0gb9+IRApaSAJsH34MVPfdd8ubFM44Emi529sWCjQCgmUvt
B811AhnbC6b1cXhdjCj9+5E=
=b1A8
-----END PGP SIGNATURE-----