Hi,

There is no way an "ordinary" ssh-client can fully tunnel ftp. By fully I
mean both the data and the command channels of the ftp-connection. This
means that if you have a ftp-server that accepts connections from
different ip-addresses for data/command then you CAN set up an ordinary
ssh-tunnel e.g. from your host to ftp-server port 21. This does only work
if you also have a "clear-text" connection-path directly to the
ftp-server, i.e. if it is "behind" a firewall/NAT then you won't get it
working anyway. In ssh2 you have the option of using sftp which needs a
"proprietary" ftp-server, but I have not used that so I can't say if
integration with "ordinary" ftp-clients is possible.

However, I have done an ssh1.5-client in pure java which have the ability
to tunnel (real proxy) ftp-connections. With clients that do passive ftp
it works without problems (using e.g. Netscape/IE4/WS_ftp as ftp-clients).
If your ftp-client can only do PORT commands then it works in a limited
way depending on the situation you can only do 10 PORT-commands / minute
(due to cumbersome solution which is the only way to do it with current
ssh-protocol if you don't want to change the protocol).

I will release a new version of the code that is fully functional later
this week, check it out at: www.mindbright.se/mindterm/

Cheers,

/Mats

On Tue, 10 Aug 1999, David W. Robinson wrote:

> As a newcomer to this technology I have a basic question:
> 
> Is it possible to set up a regular ftp GUI to function as the front end
> of a secure ftp connection, or perhaps rather scp connection, using SSH?
> 
> Command line scp is just too cumbersome. There must be a better way.
> 
> Thanks,
> 
> David Robinson
> 

Reply via email to