Re: FTP over SSH2, similar to SecureFX?

From: Richard Whalen (WhalenR@process.com)
Date: 11/18/02


From: "Richard Whalen" <WhalenR@process.com>
Date: Mon, 18 Nov 2002 08:54:08 -0500


>
> In other words - is VanDyke doing some sort of proprietary wizardry
> behind the scenes in their client?
>

Depends upon what you call "proprietary wizardry."

I can set up FTP over SSH2 using a version of F-Secure's SSH code. This
code includes a FTP filter specifically for this purpose. The following
string was used with "local forwarding" for this:
ftp/<forwarded_port_number>:localhost:21

the "ftp/" enables the FTP protocol filter that recognizes the PORT and PASV
commands and their replies so that a secure data connection can be opened
for data connections and the necessary information substituted into the
reply so that it is used. "localhost" is necessary to have the connection
appear to come from "localhost", so that FTP works with the address that the
SSH Daemon is listening on and so that any code in FTP that attempts to
match the IP address for the data connection to the control connection is
happy. (And of course "21" is FTP's port.)

Richard Whalen
Process Software



Relevant Pages

  • Re: Port assignment
    ... It sounds like you're discussion using FTP to publish, ... references a "data connection," which is clearly a reference to the data ... FTP actually uses 2 TCP connections, one on the client port (32 in your ...
    (microsoft.public.frontpage.programming)
  • Re: Firewall issues with setting up vsftp server
    ... You need to use FTP helper module. ... channel's port 21 (PORT and PASV commands, plus their variations, as well as ... Of course, if your command channel is encrypted (for example, if you use FTP ... # Allow data connection in for passive FTP ...
    (Fedora)
  • Re: How to config ipfw for ftp server
    ... FTP servers work in Active mode, where the server listens on port 21 ... >data connection like GET, List for files. ...
    (FreeBSD-Security)
  • Re: Cant ftp from Linux box to windows-server - setsockopt
    ... but your previous post is using passive mode. ... The valid default ephemeral port range is for IIS 4/5 is 1024-5000 ... > enabled the firewall in the Linux-box but marked for opening of among other> the ftp protocol. ... > 150 Opening ASCII mode data connection for reciprocal.htm. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Restricting FTP data connection port range?
    ... Restricting FTP data connection port range? ... Not sure how you are going to restrict the port range of the client ...
    (AIX-L)