wuftp, secure ftp and chroot enviroment

[edwin hamers]

I spend an hour looking for this on ITRC but could not find an answer. So please bear with me if this question has been answered before.

I've searched the WuFTP site to see if this works with the SFTP protocol and the traffic is encrypted or not.
But then again, i like to use sftp from OpenSSH because it is already implemented on our server.
I could also not find out if sftp can be configured so that a chroot environment can be created.

I would like to disable the root/oracle/etc users from ftp'ing, (probably with /etc/ftpusers?) and make a seperate user for sftp.

- Is Wu FTP secure, does it use encryption?
- can sftp be used in a chroot combo?

Thanks
Uddhava das

[James A. Donovan]

There is a chroot patch available for OpenSSH. You would need to obtain it, and compile it into the binary yourself. Everything you need should be at this site...

http://chrootssh.sourceforge.net/

wu-ftp does not do any type of encryption. It's a standard FTP server

[Steven E. Protter]

The free version of wu-ftp client does not work with encrpted authentication. Therefore it is not secure.

There are free versions of sftp clients that work with windows are are secure. I've seen one gui client that is quirky, but seems to work with sftp properly.

I can't remember what it is, its on my home machine.

I think its called core sftp or core ftp.

It has an annyoing counter at startup. I'll let you know if you can wait until I get home.

SEP