3/11 There's ssh and scp. Is there sftp? I want to interactively get
and put a file. scp is rather inconvenient.
\_ DataFellows ships an sftp but it's just making an ssh tunnel
to the ftp-cmd channel for you to use. It only secures the
command channel and requires that you have some account on the
remote machine. Due to the design of the ftp protocol, it
is difficult to secure the data channel, though there are ways to
do this that involve a bit of work on the part of an administrator.
--jon
\_ I'm sure you could just write a little script called sftp that
would establish a secure channel and tunnel ftp automatically.
\_ no, you can not do it with a simple shell script for
the data channel. The command channel is simple, data is
not with most of the unix ftp clients available.
\_ in many cases, you need to hack the ftp client from source
(or edit raw binary for the truly fooful) to get it to
use arbitary host:port's for the data channel (you need to
use ftp's passive mode btw). There is a way to combine both
the data and command channel for easier forwarding through
a novel use of a socks proxy. This is the "bit of work" to
which I earlier referred. --jon
\_ Most people only really care about securing the command
channel because of the password. If you were working
on something top secret, however, that would be a diff
story and you should just use the inconvenient scp.
\_ How about:
ssh -f -L 1234:csua.berkeley.edu:23 http://csua.berkeley.edu
sleep 20 </dev/null >/dev/null
as adapted from the fetchmail manpage?
\_ What about writing an expect script to transfer files using
ssh? For example, if I want to get a file to my machine
from soda I can do:
ssh soda -C cat filenameOnSoda > fileNameOnMyMachine
You can use the same trick to send a file. You could
write a script that would also let you do ls and other
stuff too. -emin
\_ the nice thing about a "secure ftp" is that you
amortize the cost of the SSH authentication process
over the transfer time of a number of files rather
then once for each file transferred, and yet you
can still deal with files on a individual, interactive
basis. Doing ls via another ssh-wrapper would just
add to the number of ssh-authentications needed, which
for some users is a high cost. --jon
\_ Try SRP. It provides a secure ftp and ftpd, along with a few other
cool security features.
\_ Can someome who has looked at SRP explain what it is about? |