Paul Lussier said:
> In a message dated: Wed, 28 Feb 2001 10:29:59 EST
> Jeffry Smith said:
> 
> >> Oh, don't forget sftp :)
> >
> >Yep, comes with SSH, as I recall.  Thanks for reminding me.
> 
> No, it doesn't unfortunately, but it's easy enough to find on freshmeat.
> Also, sftp doesn't solve the anonftp access scenario :)

You're right:
smith@smith:~$ apt-cache search sftp
wxftp-doc - Documentation for for wxftp, needed for the help menu
sftp - ssh-tunneled file transfer program
wxftp-gtk - A graphical ftp program with GTK interface

(wxftp get's caught in the search because it is similar to wsftp - a GUI for 
ftp, according to the package).

Well, for anonftp, I'd look at one of the more secure FTP servers on freshmeat, 
particularly those that are designed just to do anonymous FTP.

For those who argue that FTP is bad because of port opening:
1.  Use passive mode
2.  Use a chroot jail to ensure a breakin doesn't give root priviledges.
3.  One good thing about multiple ports (vs running everything over port 80) is it 
improves firewalling - one protocol per port.  The normal reason I've heard for 
running services over http is to "get around the firewall."  Of course, I don't want 
you to get around the firewall - it's there for a reason!  

HTTP is a great protocol for short download/interactive sessions, like the web.  It is 
not, nor was it ever intended to be the be-all end-all transfer protocol.  Mainly 
because different transfers have different characteristics.  

jeff

-----------------------------------------------------------------------
Jeffry Smith      Technical Sales Consultant     Mission Critical Linux
[EMAIL PROTECTED]   phone:603.930.9739 fax:978.446.9470
-----------------------------------------------------------------------
Thought for today:  hungry puppy n. 

 Syn. slopsucker.





**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to