Re: FTP transfer on SSH tunnel
From: Petr Pisar (xpisar_at_fi.muni.cz)
Date: 08/18/05
- Next message: Per Hedeland: "Re: PAM changing user name"
- Previous message: Namit: "Client can't connect to the default port, but can connect to other ports"
- In reply to: Fernando Nachtigall: "FTP transfer on SSH tunnel"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 18 Aug 2005 17:59:51 GMT
Fernando Nachtigall napsal(a):
> Folks,
>
> I have a (propably) unusual situation and need your help getting this
> through. Here´s the problem:
>
> I have several Windows servers running FTP servers. Those servers are
> used by one UNIX database box, which acts as a FTP client to get and
> send files.
>
> I want to make those transfers safe, and the first thought was to
> migrate the FTP service to SCP. The solution would then require us to
> buy all those Windows FTP server a SCP/SFTP Server license. Free
> software is not an option (...).
>
> What I want to do is to install a SSH client on my Windows server, and
> estabilish a tunnel from them to my UNIX server. Then, redirect the FTP
> requisitions started on the UNIX server to use the tunnel and get to
> the correct Windows server, where it comes out the tunnel and is sent
> to the FTP service.
>
> In sum, the FTP server will be the SSH client (creating the tunnel),
> and the FTP client will be the SSH server.
>
> Is it possible? Is that reasonable?
>
Tunneling FTP protocol is not good solution because of two FTP
connections and sending TCP/IP addresses in the control connection. (It
is possible to do it, but you need FTP protocol [port, pasv] commands
and replies manipulation or use something like FTP proxy.)
You should choose another secure protocol, e.g. FTPS (this is something
_else_ than SFTP). In this case SSL/TSL standardized extensions for FTP
protocol exist. Does windows FTP server support it (without additional
licenses)?
Or you has to secure lower layer under the FTP relation. Use any VPN
solution (IPsec, openvpn).
--Petr
- Next message: Per Hedeland: "Re: PAM changing user name"
- Previous message: Namit: "Client can't connect to the default port, but can connect to other ports"
- In reply to: Fernando Nachtigall: "FTP transfer on SSH tunnel"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
