Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-24 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 05:15:13PM -0800, Smith wrote: > It would be nice if sftp/scp/ssh could be chrooted. But I'm sure you > can always mess with the rights for each user though. > > As for "warns of k1dd13s", why care? If you open a port, someone will > find you. If you're concerned about

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Smith
It would be nice if sftp/scp/ssh could be chrooted. But I'm sure you can always mess with the rights for each user though. As for "warns of k1dd13s", why care? If you open a port, someone will find you. If you're concerned about the kiddies using up your bandwidth, have pf running on the sa

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 10:55:31AM -0800, Smith wrote: > Easiest solution: > > Setup a ftp server or sftp/scp/ssh server with OpenBSD on a separate IP > Address from your firewall/gateway. I once setup a ftp server out in > the open like that with OpenBSD. I ran no firewalls. I never had any

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Smith
Easiest solution: Setup a ftp server or sftp/scp/ssh server with OpenBSD on a separate IP Address from your firewall/gateway. I once setup a ftp server out in the open like that with OpenBSD. I ran no firewalls. I never had any problems. If you do this and say if it does get hacked, broken

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 12:14:52AM +, Stuart Henderson wrote: > On 2006/01/23 00:57, Joachim Schipper wrote: > > The main problem, right now, is file transfers. The old server serves > > FTP over SSL. > > Is passive FTP over SSH-tunnel any good? It's easy enough to use a > win32 build of OpenS

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 01:30:21AM +0100, viq wrote: > Just a thought - why not samba? > With some additions, like > http://www.camden.rutgers.edu/HELP/Documentation/Unix/stunnel/S50-1331_stunnel.php > or otherwise VPN it. > ...yeah, i guess it deviates then from the simple setup you had before...

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Olivier Mehani
On Mon, Jan 23, 2006 at 12:57:34AM +0100, Joachim Schipper wrote: > [1] Though if I can get everyone to use public key authentication, I > could use the command= syntax in ~/.ssh/authorized_keys (where is this > documented, anyway?). it is, in sshd(8), under AUTHORIZED_KEYS FILE FORMAT -- Olivi

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-22 Thread viq
Just a thought - why not samba? With some additions, like http://www.camden.rutgers.edu/HELP/Documentation/Unix/stunnel/S50-1331_stunnel.php or otherwise VPN it. ...yeah, i guess it deviates then from the simple setup you had before... -- viq

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-22 Thread Stuart Henderson
On 2006/01/23 00:57, Joachim Schipper wrote: > The main problem, right now, is file transfers. The old server serves > FTP over SSL. Is passive FTP over SSH-tunnel any good? It's easy enough to use a win32 build of OpenSSH, or plink from PuTTY, to give an easy-to-click interface for Windows users,

Suggestions about a replacement for FTP over SSL [long]

2006-01-22 Thread Joachim Schipper
Hello all, I am currently migrating a server to a trio of machines using OpenBSD, and ran into a bit of a design problem. Most of this is not OpenBSD specific; I'll happily take this question elsewhere if told so, but it would not exactly be the first non-OpenBSD-specific question here. To start