I agree that its a good idea to stay away from chronically
exploited services such as wu_ftpd or sendmail - but I don't see
a problem with using the service... understanding that lots of
updates will be required.  (Sounds like maintaining a windows
computer doesn't it :) )

I believe sftp is _not_ the same as tunneled ftp (via
ssh/stunnel). It is one option that comes with OpenSSH (and
probability other SSH packages). I believe it requires additional
config to get the sftp sub-system working properly where scp just
uses that regular ssh. 

Since I'm a fan of SCP and mentioned many clients were available
here is my list of favorites:

  Windows: http://winscp.sourceforge.net/eng/
  Linux: (open an xterm) scp (from http://www.openssh.org/)
  OSX: http://rsug.itd.umich.edu/software/fugu/download.html
  OS9: http://www.lysator.liu.se/%7Ejonasw/freeware/niftyssh/

@


On Fri, Dec 12, 2003 at 01:56:27PM -0600, Dan Rue wrote:
> On Fri, Dec 12, 2003 at 12:13:45PM -0600, Aaron Thompson wrote:
> > <.02>
> > the question shouldn't be: "Did it have a hole?".
> > it should be: "Was it fixed (properly)? and how quickly?".
> > </.02>
> Yes, but why choose a *ftpd that has a history of vulnerabilities such
> as wu-ftp.  I had a professor in college a couple years ago, and all of
> his red hat boxes got 0wned through a wu-ftp exploit.  Now, i'm sure the
> boxes weren't up to date, but he was quite embrassed about the whole
> thing.
> 
> Anyway, about the sftp thing, if I understand it right, it's not ftp at
> all, just an ftp-like client that uses scp, right?  from the users
> perspective, it's like ftp, but it is really not ftp at all.  If I am
> right (anyone?), then sftp is a bit of a misnomer.  
> 
> And if you're looking for a good sftp client or whatever you want to
> call it, I have used filezilla from windows with good results.  supports
> regular style ftp, as well as "ftp" over port 22 scp style.  
> 
> dan

-- 
Aaron Thompson   Unix Systems Administrator, College of Natural Science
University of Northern Iowa                      Cedar Falls, IA  50614

"Human beings, who are almost unique in having the ability to learn from
the experience of others, are also remarkable for their apparent
disinclination to do so."  -Douglas Adams

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list