Secure Ftp Website Links For
Ftp
 

Information About

Secure Ftp




In the context of Computer Networking , FTP over SSH refers to the practice of tunneling a normal FTP session over an SSH connection.

Since FTP, unusually for a TCP/IP protocol still in use, uses multiple TCP connections, it is particularly difficult to tunnel over SSH. With many SSH clients, attempting to set up a tunnel for the ''control channel'' (the initial client-to-server connection on port 21) will only protect that channel; when data is transferred, the FTP software at either end will set up new TCP connections (''data channels'') which will bypass the SSH connection, and thus have no Confidentiality , Integrity Protection , etc.

If the FTP client is configured to use ''passive mode'' and to connect to a SOCKS server interface that many SSH clients can present for tunnelling, it is possible to run all the FTP channels over the SSH connection.

Otherwise, it is necessary for the SSH client software to have specific knowledge of the FTP protocol, and monitor and rewrite FTP control channel messages and autonomously open new forwardings for FTP data channels. Version 3 of the SSH Communications Security Corp. software is an example of software supporting this. {Link without Title}

A FOSS alternative is FONC {Link without Title} , which can be used to secure both passive and active ftp transfers over normal SSH Tunnels. Any ftp server or client can be used in conjunction with FONC, and both data and control connections are secured.

FTP over SSH is sometimes referred to as secure FTP; this should not be confused with other methods of securing FTP, such as with SSL/TLS ( FTPS ). Other methods of transferring files using SSH which are not related to FTP include SFTP or SCP ; in both of these, the entire conversation (credentials and data) is always protected by the SSH protocol.


SEE ALSO