On Wed, 9 Aug 2000, John Abreau wrote:
>> SFTP is, I believe, just FTP tunneled over a forwarded SSH port. Can
>> someone who has studied this confirm or deny?
>
> Actually, both variants of sftp start an instance of ssh, and then have
> the remote sshd fork off teh remote component ("sftpserv" for the free
> one, "sftp-server2" for the F/Secure one). Neither needs an ftp daemon
> running.
Interesting. So sftp isn't related to scp, then. Where might I find more
information on sftp? I've always just used the scp that comes with ssh.
> I thought I read that SecureFX depended on the F/Secure variant of sftp.
> I'll have to look at it again.
Well, I can say with certainty that it does not. SecureFX+OpenSSH *does*,
however, require a regular FTP daemon running on the server. However, if you
use firewall rules and/or host access controls, you can effectively make the
FTP daemon only respond to the secure, SSH tunneled clients.
> No, we haven't yet; I've been pushing OpenSSH. I'm trying to come up with
> acceptable alternatives so we won't have to spend the money.
That is always nice, but since the alternative to using OpenSSH is to spend
even more money for something that may not even be as secure, a site license
for SecureFX is likely your least expensive, "GUI friendly", Win32 option.
Cheers,
--
Ben Scott <[EMAIL PROTECTED]>
Net Technologies, Inc. <http://www.ntisys.com>
Voice: (800)905-3049 x18 Fax: (978)499-7839
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
