RE: Anonymous FTP
-----Original Message-----
From: Robert Kerr [mailto:kerrr@et.byu.edu]
Sent: Thursday, January 11, 2001 4:08 PM
To: Jason Mogavero
Cc: Debian List
Subject: RE: Anonymous FTP
>I was under the impression that I couldn't run scp unattended. Is that
>not correct?
Well, unless you use .shost files, you'll need to encapsulate login/password
into the script, and that's considered "bad."
I'm assuming you're NATing at your firewall (NAT hide most likely?) so
you'll need to find out what your IP is being translated to (or the whole
NAT address pool if that's how NAT's done at your site) and add that to the
.shosts file on the box outside the firewall. Make sure you connect once
before letting the script run as you need to exchange keys. I'm assuming
it's a UNIX box capable of running an ssh server that you need to connect
to. Correct me if I'm wrong.
Someone else mentioned using rsync tunneled through ssh, which isn't a bad
idea either, but I think scp is more suited to scripting as long as the host
files are set up correctly.
>The box outside the firewall can't reach anything inside the firewall
>without going through a SecureID gateway--ie. wget can't see anything on
>the internal network.
Noted. That definately won't work then. If it's outbound traffic only,
you're pretty limited in choices.
Reply to: