openssh bugs - Nov 2007 - [Bug 1387] New: Support for tunneling FTP

https://bugzilla.mindrot.org/show_bug.cgi?id=1387

           Summary: Support for tunneling FTP
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 4.7p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: mindrot.org at schildbach.de


It would be great if OpenSSH would come with special support for
tunneling FTP transfers (both control and data channels), somewhat
similar to Linux Netfilter.

FTP still plays an important role, despite being deprecated by SFTP and
SCP. There are still servers (behind firewalls) that can only do FTP.
Also, having a tunnel for FTP would allow the tunnel to end on a
machine different from the gateway, while typical SFTP and SCP
connections can only access files local to the gateway.

It should be noted that there are a lot of "howto tunnel ftp via ssh"
documents floating around that leave their readers in the false
assumption that their connection would be encrypted (only the control
channel is). Such as:

http://www.ftpgetter.com/de/ftp-ssh-tunnel.php

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1387


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|sshd                        |ssh
                 CC|                            |dtucker at zip.com.au




--- Comment #1 from Darren Tucker <dtucker at zip.com.au>  2007-11-04
10:20:27 ---
FTP is an ugly protocol, I don't know that ssh (BTW, the the magic
would need to be in the client not the server)

(In reply to comment #0)
> It would be great if OpenSSH would come with special support for
> tunneling FTP transfers (both control and data channels), somewhat
> similar to Linux Netfilter.
FTP is an ugly protocol and I don't think ssh should have special-case
code for it.  (BTW, the the magic would need to be in the client not
the server for the common case).

If your client supports SOCKS, and both client and server support FTP
passive mode, you can already tunnel FTP with DynamicForward.

[...]
> It should be noted that there are a lot of "howto tunnel ftp via
ssh"
> documents floating around that leave their readers in the false
> assumption that their connection would be encrypted (only the control
> channel is). Such as:
> 
> http://www.ftpgetter.com/de/ftp-ssh-tunnel.php
Incorrect information out on the internet is somewhat out of our
control...

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1387

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #2 from Darren Tucker <dtucker at zip.com.au> 2010-01-13
11:59:20 EST ---
Thanks for the suggestion but we're not going to do this.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1387

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> 2010-04-16 15:50:39
EST ---
Mass move of bugs RESOLVED->CLOSED following the release of
openssh-5.5p1

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.