topic Re: blocking specific file extensions with sftp in Operating System - HP-UX

blocking specific file extensions with sftp

Brent DeGennaro — Wed, 23 Apr 2008 13:28:53 GMT

Is it possible to filter or block files with extensions like .mp3 with sftp? Looking for something similar to path-filter in ftpaccess.

Thanks

Re: blocking specific file extensions with sftp

Steven E. Protter — Wed, 23 Apr 2008 15:34:32 GMT

Shalom,

These products were not designed to filer files. sftp is part of openssh and the name is kind of meaningful.

Even if you succeed in blocking mp3 files people will just rename them and transfer them anyway.

This is a job for content filtering and a strong HR Internet use policy.

You can write a cron job to scan for and delete these files

find /directoy -name *.mp3 > list
while read -r fn
do
rm -f $fn
done < list

SEP

Re: blocking specific file extensions with sftp

VK2COT — Wed, 23 Apr 2008 21:45:37 GMT

Hello,

If you are prepared to use more
comprehensive FTP over SSL server
like ProFTPD, then you can do it.

proftpd.conf has options like:

PathDenyFilter "\\.(jpg|jpgeg|mpeg|mpg|mp3)$"

There is a module that is distributed with
ProFTPD to support SSL/TLS:

You may need to specify the location of the OpenSSL header and library files in your configure command. For example:

./configure --with-modules=mod_tls \
--with-includes=/usr/local/openssl \
--with-libraries=/usr/local/openssl

If memory serves me well, there is a
port with TLS/SSL to HP-UX somewhere.

The Porting and Archiving Centre for HP-UX
contains only standard ProFTPD...

Cheers,

VK2COT