Great Circle Associates Firewalls
(August 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: ange-ftp and ssh
From: Brian Hatch <bri @ ifokr . org>
Date: Fri, 16 Aug 1996 12:23:01 -0500 (CDT)
To: Frederic Cirera <fred @ warka . ai . univ-paris8 . fr>
Cc: Firewalls @ GreatCircle . COM
In-reply-to: <199608161314 . PAA23538 @ warka . ai . univ-paris8 . fr>

+ Please, how to use ssh with ange-ftp to encrypt the password exchange
+ or all the session. 


I'm not familiar with ange-ftp itself, but this is how I do it with normal
ftp -- it should work the same.


The general format is:

machine%  ssh -L listen-port:host:port

or

machine%  ssh -R listen-port:host:port


Example:  We're on a machine called 'home', from which you wish to ftp,
and a machine called 'home' to which you wish to ftp.

First, in one window, you'd run the following:

% ssh -L XXXXX:127.0.0.1:21 work

where XXXXX is some random high port number.  Once the remote-login to 
work is established, on the home machine, you'd

home% ftp localhost XXXXX

Now the ftp command channel (commands, username & passwords, etc) will
be sent via the ssh client (on home) to the sshd (at work) and sent to the
host:port specified (in this case, localhost {ie work} on port 21).

Note: actual data transfers will not be encrypted in this way, just the 
command channel.


Also, I'd use the -v argument for all the ssh commands while you test this
out -- it can be most informative.  Also, you can see what channels are being
sent over by getting into escape mode ('~' unless otherwise changed)
and hitting #  (list forwarded connections).





						 Bri
--
bri @
 ifokr .
 org
Systems and Security Engineer
Onsight, Inc.  http://www.avue.com/



References:
Indexed By Date Previous: Re: No More Unlimited User Licenses Please...
From: Renee Landers <rlanders @ sware . com>
Next: Re: What threats?
From: Robert Hanson <roberth @ cet . com>
Indexed By Thread Previous: ange-ftp and ssh
From: Frederic Cirera <fred @ warka . ai . univ-paris8 . fr>
Next: Re: Firewall Questions - MJR Functional Summaries
From: JD McCown <jdm1 @ ns . ncsa . com>

Google
 
Search Internet Search www.greatcircle.com