Re: [cobalt-security] OT: Free Windows SSH clients (WAS: Slightly off topic..)

[Ted Behling <TBehling@xxxxxxxxxxxxx>]

At 02:30 PM 8/5/01 +0100, Gareth wrote:
>There seems to be a lot of discussion about using ssh servers for your
>telnet and ftp, are there any (good) free ssh clients that run on windows
>software. I have a copy of SecureCRT for telnet connections but was
>wondering about the availability of free software for FTP. Although I am
>sure that there are sites that give reviews of ssh software I think that
>many of these would be inacurate representations for people who use the
>software regularly, i.e. features become annoying.

Well, I use SecureCRT and ssh.com's Windows SFTP client.  I believe the
latter offers a free academic version, if you're in that category.

As with cars, the best way to pick a good client is to try a bunch.  Check
out OpenSSH's list at http://www.openssh.com/windows.html.  The Cygwin
collection has Windows ports of your favorite Unix utilities, including
BASH and OpenSSH.  See http://www.cygwin.com .

>I personally use ssh for telnet but havn't bothered to install it for ftp.
>As no sensitive data (apart from passwords) get transfered over my ftp
>connections would the general consensus still be to upgrade to sFTP?

I recommend using SFTP if only for the public-key based authentication.  If
you make the server require a key AND a password, it'll be rather clsoe to
impossible to brute force one's way in (esp. if you allow only one failed
password attempt per connection).  You probably don't have to do anything
else on the server to use it for SFTP.  Besides, you get to turn off your
FTP server, which would prevent an expoit of a future FTP daemon
vulnerability.

--------------------------------------------------------------------------
Ted Behling, Web Application Developer - Monarch Information Systems, Inc.

43 Folly Field Road, Unit 4, Hilton Head Island, SC 29928-5434
E-mail: mailto:TBehling@xxxxxxxxxxxxx
Phone/Fax: 1-800-842-7894    Local or Outside the USA: 1-843-842-7894
Cell Phone (urgent issues): 843-816-7895
Cell Phone E-mail: mailto:TedPhone@xxxxxxxxxxxxx (116 letter limit)
Web site: http://www.MonarchIS.net
--------------------------------------------------------------------------