SFTP with no SSH session

From: Lapp (lapp_at_yandex.ru)
Date: 06/03/03 

Date: Mon, 2 Jun 2003 15:47:39 -0700

Hi All,
Suppose someone has telnet and FTP access to his System. Suppose, he wants
to restrict telnet from outside his LAN, while still letting FTP working.
What does he do? Right, he closes port 23 (telnet) on the router, leaving
port 21 (FTP) open.

Now, suppose I have SSH (session) and SFTP access to my system. Suppose,
for some a reason, I don't want users to connect from outside the LAN even
over SSH to create a command session. And I still want to allow them SFTP
access from outside for file transfer. In this case, I can not use the
above technique, as SSH and SFTP both use the same port, which is 22.
Moreover, SFTP uses SSH for authorization.

The question is, if it is possible to allow users to transfer files over
SFTP, while restricting SSH sessions from outside?
Thanks,
   Andrey

Relevant Pages

  • Re: Secure file transfer
    ... We're talking about SFTP, which is a variant how to use SSH to secure the ... FTP protocol. ... is it better to use AUTH SSL or SSH/SFTP?" ...
    (comp.security.misc)
  • Re: firewalls and computer securi
    ... >So...I shouldn't be using ftp and telnet, but ssh and sftpinstead, ... what ssh is and won't go through the trouble of finding out. ... I had a high school ...
    (comp.os.linux.security)
  • Re: Secure file transfer
    ... We're talking about SFTP, which is a variant how to use SSH to secure the ... FTP protocol. ... "FTP over SSH" is the protection of the command channel. ...
    (comp.security.misc)
  • Re: Does IIS support SFTP?
    ... Here's a guide for using SSH to set up SFTP on Windows. ... using FTP over SSH. ... It adds file transfers to ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Secure telnet and ftp?
    ... Or is it Just As Easy to use the real secure ftp ... But it seems like you could implement this using SSH to establish a tunnel into a remote machine then go local to telnet/ftp assuming they were running on the box. ... ssh, sftp, scp are no harder to use than telnet, ftp. ... For GNU/Linux + other Unix can use gftp as a gui client to handle sftp and scp. ...
    (comp.lang.ruby)