Re: SSH and pure ftp

Sorry about the double email there Jeremy. You should only have one this time :)

The ftp server is to function as a repository of files for companies
outside of the company I work for and for one internal office.  Each
entity needs to have their own home directory and must be restricted
to their home directory.  Seems like chrooting is the direction I need
to go with SSH.  Any recommendations of a good source to read about
chroot?

Thanks,

Eric

On 12/2/05, Jeremy Kitchen <[email protected]> wrote:
> I already get one copy of your message (from the list) I don't need a second
> in my inbox. :)
>
> On Friday 02 December 2005 11:24 am, Eric Peers wrote:
> > First, apologies for my ignorance on the subject.  I'm looking to
> > create a secure connection between the ftp server and the client. SSH
> > works fine on its own, however, I don't have any of the nice lock down
> > features available as I do using pure-ftp.  So, what I want to do is
> > use pure-ftp through a SSH tunnel.
>
> since the FTP protocol uses out-of-band data transfers, I don't believe this
> is possible, pure-ftpd or otherwise.  It theoretically could be possible if
> your client was smart enough to know to set up its own tunnels and such, but
> I highly doubt there are any clients out there to do this.
>
> > Anyway, a lot of this is new to me, so there is probably another way
> > to achieve the same results using SSH alone.
>
> you said you're just trying to secure the connection between the client and
> the server.. but you can't use ssh because you need pure-ftpd's lockdown
> features?  What are you referring to?  You can run sshd inside a chroot and
> allow access to only the files you wish users to have access to, etc.
>
> Also, if you have a limited number of clients connecting from a limited number
> of places (perhaps you have your ftp server in one location and need to
> access it from clients at 3 separate office locations) you could set up an
> IPSec tunnel between the client network and the ftp server (the machine it's
> not, not pure-ftpd itself) .. but that's a bit more complicated ;)
>
> If you could describe exactly what your needs are, perhaps we can suggest a
> solution.
>
> -Jeremy
>
> --
> Jeremy Kitchen ++ [email protected]
>
> In the beginning was The Word and The Word was Content-type: text/plain
>   -- The Word of Bob.
>
>
>

---------------------------------------------------------------------
To post a new message, e-mail: [email protected]
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]