Re: PC based sftp servers

Rob,

If looking for win based SSH server (sFtp is the mis-label that throws everyone off, think of it as "ftp over SSH" as wikipedia describes it). So I would not expect the i ftp listeners to provide exit program support for a connection made to another part of the system.
btw-wiki has comparison of many ssh servers.
imho the cheap/free win based servers are the less secure, but in networks where it is win based servers & personnel protecting the perimeter it seems common.
For securing i SSH, have you looked at the redpaper Securing Communications with OpenSSH on i5/OS?
www.redbooks.ibm.com/redpapers/pdfs/redp4163.pdf

jim franz

----- Original Message ----- From: "Scott Klement" <pctech@xxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Friday, April 20, 2012 1:31 PM
Subject: Re: [PCTECH] PC based sftp servers

Hi Rob,

The OpenSSH server (the sftp server that IBM provides for IBM i) is the
primary SSH server used in more than 85% of SSH installations, worldwide.

I don't understand why you say it's "fraught with security concerns".

Indeed, when I asked IBM why they didn't make a native SSH server
instead of using the Unix one, security concerns were the main thing.
The OpenSSH server is open source an analyzed by thousands of security
and cryptography gurus to make sure the cryptography doesn't have any
flaws in it. The IBMer I talked to said they couldn't match that level
of security. A native tool would not be used by that many people, and
only a few engineers would be given the opportunity to analyze the
cryptography. The chance for an undiscovered vulnerability was just too
high, they thought it was safer to just go with a widely-used,
well-tested and bullet-proofed tool.


On 4/20/2012 9:43 AM, rob@xxxxxxxxx wrote:

I am looking for a PC based sftp server. I like regular ftp on the i. IBM
wrote that and did it right. However, for sftp they ported over a very
poor sftp server that's fraught with security concerns. I just can't get
comfortable with that.

Do you have some suggestions for a PC based sftp server?


Rob Berendt

--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.