How to get sftp more secure?

Hello everyone,

SSH is good to use, but it lead out one safety question, if you keep port
'22' open, someone may use sftp to transfer data, it's not permited in our
LAN, how to resove the question? Either if have a way to recode the data
transfer, just like vsftpd doing, I may check the recode and get to know
what's happening, it'll be acceptable also. Thanks for your help!

Have a good day!

Regards,

Joffre

Hello,

tech11 a écrit :
>
> SSH is good to use, but it lead out one safety question, if you keep port
> '22' open, someone may use sftp to transfer data, it's not permited in our
> LAN, how to resove the question?

If you mean to disable the sftp function on your sshd daemon, just
comment out the following line in /etc/ssh/sshd_config :

Subsystem sftp /usr/lib/sftp-server

The 'sshd_config' and 'sftp-server' manpages should tell you about the
details. But keep in mind that there are other means than sftp to
transfer data over SSH.

> Either if have a way to recode the data
> transfer, just like vsftpd doing, I may check the recode and get to know
> what's happening, it'll be acceptable also.

Huh ?