Date: Thu, 26 Aug 2010 15:52:54 -0700 From: Bill Campbell <freebsd@celestial.com> To: freebsd-questions@freebsd.org Subject: Re: Advantage -vs- Disadvantage: SFTP -vs- SCP Message-ID: <20100826225253.GB2034@ayn.mi.celestial.com> In-Reply-To: <AANLkTikvteMWrwHxqAmva4_uxtR2KWapOs6KxXL=qcUj@mail.gmail.com> References: <AANLkTikvteMWrwHxqAmva4_uxtR2KWapOs6KxXL=qcUj@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Aug 26, 2010, Ed Flecko wrote: >Hi folks, >I have a server I'm building that is internet accessible and I'm >wondering if there's any advantages/disadvantages of using either SFTP >-vs- SCP? I would say that depends on what software the clients want to use. FileZilla works nicely with sftp, and is available on Windows, OS X, and I presume other *nix platforms (I'm a CLI guy so only have used it enough to be sure it works). One can also use the sshfs to provide the ability to mount remote file systems over an ssh connection. This requires nothing on the file server side other than working ssh. I haven't tried this on FreeBSD. On Linux it requires kernel support of fuse, user level file system. There's no reason one couldn't use both sftp and scp/sshfs. We generally don't allow any ssh password access, but require authorized_keys. In a few cases where the client absolutely insists on allowing password authentication, we lock it down to a limited set of IP addresses. We have been able to get many clients to use OpenVPN to make their connections which makes life easier after the initial setup as all connections are through the OpenVPN tunnel so we don't have to allow outside ssh access. Bill -- INTERNET: bill@celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 Skype: jwccsllc (206) 855-5792 If you make yourselves sheep, the wolves will eat you -- Benjamin Franklin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100826225253.GB2034>