From owner-freebsd-questions@FreeBSD.ORG Wed Nov 8 19:26:10 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3132E16A416 for ; Wed, 8 Nov 2006 19:26:10 +0000 (UTC) (envelope-from lists@jnielsen.net) Received: from ns1.jnielsen.net (ns1.jnielsen.net [69.55.238.237]) by mx1.FreeBSD.org (Postfix) with ESMTP id C5FB143DA3 for ; Wed, 8 Nov 2006 19:25:58 +0000 (GMT) (envelope-from lists@jnielsen.net) Received: from localhost (jn@ns1 [69.55.238.237]) (authenticated bits=0) by ns1.jnielsen.net (8.12.9p2/8.12.9) with ESMTP id kA8JPwVu024670; Wed, 8 Nov 2006 11:25:58 -0800 (PST) (envelope-from lists@jnielsen.net) From: John Nielsen To: freebsd-questions@freebsd.org Date: Wed, 8 Nov 2006 14:25:46 -0500 User-Agent: KMail/1.9.4 References: <20061108094550.GA26361@mail.it-geeks.kiev.ua> <200611081412.18966.lists@jnielsen.net> In-Reply-To: <200611081412.18966.lists@jnielsen.net> X-Face: #X5#Y*q>F:]zT!DegL3z5Xo'^MN[$8k\[4^3rN~wm=s=Uw(sW}R?3b^*f1Wu*.<=?utf-8?q?of=5F4NrS=0A=09P*M/9CpxDo!D6?=)IY1w<9B1jB; tBQf[RU-R<,I)e"$q7N7 MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200611081425.46932.lists@jnielsen.net> X-Virus-Scanned: ClamAV version 0.88.4, clamav-milter version 0.88.4 on ns1.jnielsen.net X-Virus-Status: Clean Cc: Gorobets Igor Subject: Re: ftp over ssh X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Nov 2006 19:26:10 -0000 On Wednesday 08 November 2006 14:12, John Nielsen wrote: > On Wednesday 08 November 2006 04:45, Gorobets Igor wrote: > > Hello. How correctly to adjust this miracle? :-) > > Assuming you have a server that is running sshd (on all interfaces) and > ftpd (only on the loopback interface): > > ftpclient# ssh -fnN -l 20:localhost:20 -L 21:localhost:21 user@ftpserver > ftpclient# ftp localhost > ftp> passive Typo above, -l should be -L. Also, it turns out this doesn't work beyond getting logged in without also specifying a specific range of "passive ports" for the ftp server to use and forwarding those through ssh as well. So as others have said, you're probably better off using sftp and/or scp, or setting up a true VPN if you're tied to traditional FTP for some reason. JN