|
|
|
OLP Had 4 Million Hits Updated Daily! 12795+ Files & Over
10,000+ Pages Of All
Medical Marijuana
Information, Research, Grow
Guides,
How To's, Legal, Everything
You Need To Know Online
Or Email Securely Here OLP NewsletterBOYCOTT PAYPAL!
|
1999-2008 Copyright ©
All Rights Reserved.
No part of this site maybe used or reproduced in whole or in part
without the written consent of the Copyright Owner www.onlinepot.org
OnlinePot assumes no legal
liability for any products, or
information
posted, services
offered,
Or contests run.
Return
Back To The Maximum Security Section Main Start Page
And Check Out The Rest Of Our Security Data To Keep You Safe!
|
Tunneling FTP over SSH |
|
|
| FTP operates over a control
channel (often port 21) and a data channel (often port 20). In normal
operation both of these channels are unencrypted. The control channel will
send the login and password in plain text. The data channel is also passed
unprotected. Both leave you open to sniffing and packet capture. If you
also have your ftpd in passv mode you may also be susceptible to
connection theft. There are a few solutions. There are some secure ftp programs that do the encryption for you, and some that help tunnel over ssh. What you'll find when you look into most of these is that they will only handle the control channel. Some may think this is sufficient, but it isn't. This is because even though you are covering the password, etc., You are missing the data channel. The data channel also sends the directory and file listings. FTP is a little more difficult to tunnel because of the dual port issue. If it was just the two ports, it would be easy, except FTP operates in a rather strange manner. Instead of transferring files all over one connection, it opens a new connection for each file. This makes it difficult to tunnel the data channel. But it is not impossible and there are a number of ways to accomplish this: scp - Secure copy. This is our recommended choice due to ease of scripting, etc. It comes with the ssh bundle and takes advantage of the SSH encryption to copy files from one system to another. If you need a win version to come from a win client try: http://www.utu.net/ohjeet/ssh_for_windows.html SFTP2 - If you have the full ssh implementation you should also have a file called SFTP2. This is a command line client to secure ftp over ssh. http://www.xbill.org/sftp/ - sftp is an ftp replacement that runs over an ssh tunnel. Both a client and a server are included. Must use special client, does have GUI version. http://www.cs.berkeley.edu/~smcpeak/SafeTP/ - One of the more popular ones. Does not exactly tunnel, instead it does the encryption of both the command and data channels. Has own client to handle port redirects, then can work with any standard ftp client program. Securing ftp is a must. But unfortunately none of the above solutions will easily work in an anonymous fashion. If you run an anonymous ftp, the best you can do is to secure the daemon and box as tight as possible. In a secure setup it is not recommended that you offer anonymous ftp. Instead, if you must offer it, have it running on an isolated box with it being the only listening service. |
Return
Back To The Maximum Security Section Main Start Page
And Check Out The Rest Of Our Security Data To Keep You Safe!