Chrooted sftp on rhel3

[Johan Booysen]

Ah - I haven't actually thought about it in those terms until you
mentioned it.

We use Vmware only on our internal network for testing and development
purposes.

Thanks for your reply.

Johan 

-----Original Message-----
From: redhat-list-bounces at redhat.com
[mailto:redhat-list-bounces at redhat.com] On Behalf Of McDougall, Marshall
(FSH)
Sent: 15 June 2007 16:23
To: General Red Hat Linux discussion list
Subject: RE: Chrooted sftp on rhel3

There were indeed multiple nics on the machine I did this with.  The
"outside" interface was the vm guest.  It served the purpose and
provided another layer between us and them.

Regards, Marshall  

>-----Original Message-----
>From: redhat-list-bounces at redhat.com
>[mailto:redhat-list-bounces at redhat.com] On Behalf Of Johan Booysen
>Sent: Friday, June 15, 2007 8:26 AM
>To: General Red Hat Linux discussion list
>Subject: RE: Chrooted sftp on rhel3
>
>Hi,
>
>If you wanted to make that virtual sftp server available to external 
>users, and put it into a dmz - can you do that without having to put 
>the physical machine into the dmz?  Just a thought that occurred to me,

>now that you mentioned it.
>
>I suppose you could if you have a second network adapter...
>
>Do you actually do this?
>
>Thanks.
>
>-----Original Message-----
>From: redhat-list-bounces at redhat.com
>[mailto:redhat-list-bounces at redhat.com] On Behalf Of McDougall, 
>Marshall
>(FSH)
>Sent: 15 June 2007 13:50
>To: General Red Hat Linux discussion list
>Subject: RE: Chrooted sftp on rhel3
>
>>Any ideas on how to restrict access so ftp users are locked
>into their
>>own home directories - if that is even possible?  It doesn't
>seem like
>>much of an issue to me, but I'd appreciate your thoughts.
>>
>>Thanks very much.
>>
>>Johan
>
>Johan.  I looked at doing this a while back and was quite unsuccessful 
>with the jail.  I ended up using VMware server and created a vm guest 
>specifically for SFTP/SCP users. If they trashed it, I would just 
>restore from image.
>
>Regards, Marshall
>
>--
>
>redhat-list mailing list
>unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>https://www.redhat.com/mailman/listinfo/redhat-list
>
>--
>redhat-list mailing list
>unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>https://www.redhat.com/mailman/listinfo/redhat-list
>

-- 

redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list