> i'd love to see this too. until then i can
> reccommend yafc (you can find it on freshmeat). i
> use it for all my ftp-over-ssh needs. not as nice as
> lftp, but it works. :-)

I've build and installed the latest yafc (0.7.7) but
unfortunately it doesn't support FTP-over-SSH2 (as
SecureFX uses) either, only SFTP :-( 

I've browsed the yafc homepage / mailarchives quickly
but couldn't find anything about FTP-over-SSH2, please
correct me if I'm wrong.

There are four secure alternatives (as I know of, if
you know more, please let me know):

1, FTP-over-SSH2 (does _NOT_ need a shell on the host,
it does tunnel it's traffic directly to the ftpd on
the host)
2. SFTP (uses sftp-server on the host)
3. FTP-over-SSL (bloody hack as some say, I don't know
much about it.
4. SSH2 / fish (needs a shell on the host)

I think they are ranked in order.

Nr 1 is nice because it connects to the running ftpd
on the host thru a SSH2 tunnel and does not need a
shell on the host. Right now only SecureFX
(http://www.vandyke.com/) does implement this.

Nr 2 is also nice but unfortunately you don't get any
logs on the sftp-server more than login/logout, no
filetransfers is logged which is bad when using a
chroot patch for openssh 3.0.2p1
(http://www.coding-zone.com/chroot-sftp.phtml) (which
also prevents users to get a shell).

Nr 3 I don't know much about, anyone have tried that?

Nr 4 is not nice because you need to give the user a
working shell on the host :-(


      Best regards / FM

__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/

Reply via email to