LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices


Reply
  Search this Thread
Old 11-05-2010, 06:59 AM   #1
eliassal
Member
 
Registered: Jan 2008
Posts: 100

Rep: Reputation: 0
Question vsFTP and ssl


Hi,
I have setup vsFTP and internally it works fine
I need to access vsFTP from office and use ssl. I generated a certificate, updated vsftp config file.
I have a netgear firewall, authorized sFTP on port 115 to be redirected to my fedora ip 192.168.1.11, also in iptables, I authorized port 115 TCP and UDP.
I use Filezilla but it gets stuck like this
Quote:
Statut : Connexion à mydomain.mycompany.fr:115...
Réponse : fzSftp started
Commande : open "salam@mydomain.mycompany.fr" 115
Error : delay crossed
Error : Impossible establishing connection to server
Then I did a telnet session as follows,
Code:
telnet mylinux 115
I discovered that I can not connect
Quote:
telnet: connect to address 127.0.0.1: Connection refused
Thanks for your help
 
Old 11-05-2010, 08:31 AM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
Why are you using vsftp and ssl instead of simply using scp or sftp which already have secure transfer built in?
 
Old 11-05-2010, 09:35 AM   #3
eliassal
Member
 
Registered: Jan 2008
Posts: 100

Original Poster
Rep: Reputation: 0
I thought that this is what I am trying to do, sFTP? in fielzila I am using sFTP-SSH protocol.
Can you please elaorate or point me on a tutorial on how to use SCP or sFTP (do you mean sFTP protocol or a kind of a tool)
Thanks
 
Old 11-05-2010, 12:53 PM   #4
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
vsftp = Very Secure FTP
This is still just ftp but has been kerberized to enhance security. One uses ftp clients to talk to it. The main use for this is for setting up standard ftp sites. It does not have the same security as scp and sftp. (That is to say it does NOT use ssh for transfer and authentication).

The other two do use ssh and are typically available wherever ssh is installed. (UNIX and Linux that is - on Windows you need something like PuTTY to do ssh and WinSCP to do scp).

scp = secure copy
scp copies files between hosts on a network. It uses ssh for data transfer, and uses the same authentication and provides the same security as ssh.

sftp = secure file transfer protocol
sftp is an interactive file transfer program, similar to ftp, which performs all operations over an encrypted ssh transport.

All of these have man pages - Typing each of "man vsftpd", "man scp" and "man sftp" should show you the relevant man pages. Also the man pages can be found on line with a simple Google search.
 
Old 11-05-2010, 01:26 PM   #5
eliassal
Member
 
Registered: Jan 2008
Posts: 100

Original Poster
Rep: Reputation: 0
Dear MensaWater, I am not talking about the option of which tool to use.
I think there is a misunderstanding, correct me if I am wrong.
I am talking about setting my linux as an ftp server, then access it with any tool would it be sftp, filezilla, scp (I already use it to ftp from some servers) from another machine.

Mmy main issue, maybe I was not clear is about the setup of my server as an ftp server to be able to upload/download when I work outside my network by using any tool that works with sFTP protocol or scp.
 
Old 11-05-2010, 01:28 PM   #6
eliassal
Member
 
Registered: Jan 2008
Posts: 100

Original Poster
Rep: Reputation: 0
Please just put aside the tool to be used

I am trying to configure my server,
 
Old 11-05-2010, 04:50 PM   #7
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
My point is the tool you use is important in determining how to configure the server. You keep trying to mix "ftp" with "scp/sftp" and it shows a basic misunderstanding on your part.

scp and sftp do NOT talk to vsftp. Only ftp talks to vsftp servers.

scp and sftp talk to systems that support ssh.

At its most basic you should be able to transfer a file with:

scp <file> <user>@<server>:<directory>[<newfilename>]

So if you had a file named important on your local system and wanted to put it in your home directory on the server called sumo and your username on the server was billybob you'd type:

scp important billybob@sumo:/home/billybob
That would create a file called /home/billybob/important on the server sumo.

If you ran:
scp important billybob@sumo:/home/billybob/notsoimportant
That would rename the file on the server. (Assuming notsoimportant wasn't a directory.)

sftp has slightly different options but also uses the ssh framework.

There are other options such as what port sshd listens on (default is 22 but many people prefer to choose a different one for internet facing systems they want to use this on). Also if there are firewalls between you and the remote server you may need to deal with other considerations.
 
Old 11-06-2010, 03:45 AM   #8
eliassal
Member
 
Registered: Jan 2008
Posts: 100

Original Poster
Rep: Reputation: 0
let me be more clear

OK, I agree and lets forget SCP for 5 seconds.

My question : HOW TO SET UP vsFTP to listen tyo another port other than 21
2nd, I red on 2 differnet web sites tha ssl can be used with vsFTP.

1st one, Configuring vsftpd for secure connections (TLS/SSL/SFTP)

Heres is one link

http://wiki.vpslink.com/Configuring_...LS/SSL/SFTP%29

As I said in my 1st post, it works fine but on port 21 and internally.

I need to use from outside so I need to use
1st another port
2nd redirect my public IP on the the firewall to mylinux port

IS IT POSSIBLE OR NOT WITH vsFTP? can you please respond by yes or no.

If no then I will start evaluating other options as SCP or using another ftp server.
 
Old 11-07-2010, 04:26 AM   #9
slickrcbd
Member
 
Registered: Jan 2003
Posts: 45

Rep: Reputation: 1
I'd try opening ports 20,21 and 990. Port 990 is for SSL, and FTP/SSL combo needs both. I've never actually tried to implement this, but it was recently mentioned in a night school class I took last spring. I'm not sure how to reconfigure SSL to listen on port 115 instead of 990.

Also, port 115 is NOT related to either of the ones you want. I had to look it up, and it's something called "simple file transfer protocol", I'm going to research it as I've only heard of tftp.
This link explains things if you scroll down:
http://www.auditmypc.com/port/tcp-port-115.asp

I believe that it is MUCH easier to open port 22 while enabling SFTP. I've found that for what you are describing, doing so is MUCH easier and may already be running on your system. If that is the case, simply opening port 22 in your firewall should allow you to use SFTP to access your systems.

From a user perspective, SFTP looks just like FTP, although it uses the SSH protocol suite to encrypt the transmissions.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
vsftp and ssl Ricci Graham Linux - Security 3 12-15-2004 10:04 AM
vsFTP and SSL Help CrackerStealth Linux - Security 8 09-24-2004 02:38 PM
Can't configure vsftp with SSL!!! technobie Linux - Software 2 09-22-2004 01:18 PM
vsftp with SSL support dominant Linux - General 0 07-05-2004 03:24 AM
vsftp & SSL dominant Linux - General 0 04-11-2004 03:19 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora

All times are GMT -5. The time now is 07:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration