[ssh] Tunneller du ftp par ssh

Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   -  
Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   -
salut a tous
je souhaiterai pourvoir me connecter en ftp sur un serveur, a travers un tunnel ssh
j'ai ouvert un tunnel vers le port 21, la connexion s'effectue mais des que le port 20 entre en jeu (ftp-data) ca plante.
Si quelqu'un a une piste de reflexion...
merci d'avance

.O  Sauvez-moi, mangez Mary :-D
(_)__
... Castor

5 réponses

  1. sebsauvage Messages postés 33284 Date d'inscription   Statut Modérateur Dernière intervention   15 684
     
    A priori avec le FTP ça va coincer (because connexion en retour sur port 20 comme tu l'as dit.)

    Sinon, tu trouvera peut-être la solution dans ce joli document à garder sous le coude:
    http://proxytunnel.sourceforge.net/papers/muppet-200204.html

    (De quoi donner des maux de tête aux admins réseau...)
    0
  2. Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   170
     
    logs serveur:

    09:54:40 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    09:54:40 - (not logged in) (TUNNEL_IP) > sending welcome message.
    09:54:40 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    09:54:40 - (not logged in) (TUNNEL_IP) > USER Castor
    09:54:40 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    09:54:41 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    09:54:41 - Castor (TUNNEL_IP) > logged in.
    09:54:41 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    09:54:41 - Castor (TUNNEL_IP) > SYST
    09:54:41 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    09:54:42 - Castor (TUNNEL_IP) > FEAT
    09:54:42 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    09:54:42 - Castor (TUNNEL_IP) > REST 100
    09:54:42 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 100.
    09:54:43 - Castor (TUNNEL_IP) > REST 0
    09:54:43 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 0.
    09:54:43 - Castor (TUNNEL_IP) > PWD
    09:54:43 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    09:54:44 - Castor (TUNNEL_IP) > TYPE A
    09:54:44 - Castor (TUNNEL_IP) > 200 Type set to A.
    09:54:45 - Castor (TUNNEL_IP) > PASV
    09:54:45 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,74).
    09:54:49 - Castor (TUNNEL_IP) > PORT INTERNET_IP,4,136
    09:54:49 - Castor (TUNNEL_IP) > 530 Port command only accepts client IP address.

    09:55:16 - Castor (TUNNEL_IP) > QUIT
    09:55:16 - Castor (TUNNEL_IP) > 221 Bye Bye ...
    09:55:16 - Castor (TUNNEL_IP) > disconnected. (00:00:36)

    09:55:26 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    09:55:26 - (not logged in) (TUNNEL_IP) > sending welcome message.
    09:55:26 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    09:55:27 - (not logged in) (TUNNEL_IP) > USER Castor
    09:55:27 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    09:55:29 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    09:55:29 - Castor (TUNNEL_IP) > logged in.
    09:55:29 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    09:55:30 - Castor (TUNNEL_IP) > SYST
    09:55:30 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    09:55:31 - Castor (TUNNEL_IP) > FEAT
    09:55:31 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    09:55:32 - Castor (TUNNEL_IP) > PWD
    09:55:32 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    09:55:33 - Castor (TUNNEL_IP) > TYPE A
    09:55:33 - Castor (TUNNEL_IP) > 200 Type set to A.
    09:55:35 - Castor (TUNNEL_IP) > PORT INTERNET_IP,4,140
    09:55:35 - Castor (TUNNEL_IP) > 530 Port command only accepts client IP address.
    09:55:37 - Castor (TUNNEL_IP) > PASV
    09:55:37 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,80).
    09:55:56 - Castor (TUNNEL_IP) > QUIT
    09:55:56 - Castor (TUNNEL_IP) > 221 Bye Bye ...
    09:55:56 - Castor (TUNNEL_IP) > disconnected. (00:00:30)

    09:58:08 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    09:58:08 - (not logged in) (TUNNEL_IP) > sending welcome message.
    09:58:08 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    09:58:08 - (not logged in) (TUNNEL_IP) > USER Castor
    09:58:08 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    09:58:08 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    09:58:08 - Castor (TUNNEL_IP) > logged in.
    09:58:08 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    09:58:08 - Castor (TUNNEL_IP) > SYST
    09:58:08 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    09:58:09 - Castor (TUNNEL_IP) > FEAT
    09:58:09 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    09:58:09 - Castor (TUNNEL_IP) > REST 100
    09:58:09 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 100.
    09:58:09 - Castor (TUNNEL_IP) > REST 0
    09:58:09 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 0.
    09:58:09 - Castor (TUNNEL_IP) > PWD
    09:58:09 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    09:58:09 - Castor (TUNNEL_IP) > TYPE A
    09:58:09 - Castor (TUNNEL_IP) > 200 Type set to A.
    09:58:10 - Castor (TUNNEL_IP) > PASV
    09:58:10 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,102).
    09:58:31 - Castor (TUNNEL_IP) > PORT 127,0,0,1,4,165
    09:58:31 - Castor (TUNNEL_IP) > 530 Port command only accepts client IP address.

    09:58:43 - Castor (TUNNEL_IP) > QUIT
    09:58:43 - Castor (TUNNEL_IP) > 221 Bye Bye ...
    09:58:43 - Castor (TUNNEL_IP) > disconnected. (00:00:35)

    09:59:07 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    09:59:07 - (not logged in) (TUNNEL_IP) > sending welcome message.
    09:59:07 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    09:59:07 - (not logged in) (TUNNEL_IP) > USER Castor
    09:59:07 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    09:59:07 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    09:59:07 - Castor (TUNNEL_IP) > logged in.
    09:59:07 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    09:59:08 - Castor (TUNNEL_IP) > SYST
    09:59:08 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    09:59:08 - Castor (TUNNEL_IP) > FEAT
    09:59:08 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    09:59:08 - Castor (TUNNEL_IP) > REST 100
    09:59:08 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 100.
    09:59:08 - Castor (TUNNEL_IP) > REST 0
    09:59:08 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 0.
    09:59:08 - Castor (TUNNEL_IP) > PWD
    09:59:08 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    09:59:09 - Castor (TUNNEL_IP) > TYPE A
    09:59:09 - Castor (TUNNEL_IP) > 200 Type set to A.
    09:59:09 - Castor (TUNNEL_IP) > PASV
    09:59:09 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,108).
    09:59:10 - Castor (TUNNEL_IP) > PORT CLIENT_IP,4,168
    09:59:10 - Castor (TUNNEL_IP) > 530 Port command only accepts client IP address.

    09:59:28 - Castor (TUNNEL_IP) > QUIT
    09:59:28 - Castor (TUNNEL_IP) > 221 Bye Bye ...
    09:59:28 - Castor (TUNNEL_IP) > disconnected. (00:00:20)

    10:00:52 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    10:00:52 - (not logged in) (TUNNEL_IP) > sending welcome message.
    10:00:52 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    10:00:53 - (not logged in) (TUNNEL_IP) > USER Castor
    10:00:53 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    10:00:53 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    10:00:53 - Castor (TUNNEL_IP) > logged in.
    10:00:53 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    10:00:54 - Castor (TUNNEL_IP) > SYST
    10:00:54 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    10:00:54 - Castor (TUNNEL_IP) > FEAT
    10:00:54 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    10:00:55 - Castor (TUNNEL_IP) > REST 100
    10:00:55 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 100.
    10:00:55 - Castor (TUNNEL_IP) > REST 0
    10:00:55 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 0.
    10:00:56 - Castor (TUNNEL_IP) > PWD
    10:00:56 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    10:00:56 - Castor (TUNNEL_IP) > TYPE A
    10:00:56 - Castor (TUNNEL_IP) > 200 Type set to A.
    10:00:57 - Castor (TUNNEL_IP) > PASV
    10:00:57 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,123).
    10:00:58 - Castor (TUNNEL_IP) > PORT CLIENT_IP,4,181
    10:00:58 - Castor (TUNNEL_IP) > 530 Port command only accepts client IP address.

    10:01:01 - Castor (TUNNEL_IP) > QUIT
    10:01:01 - Castor (TUNNEL_IP) > 221 Bye Bye ...
    10:01:01 - Castor (TUNNEL_IP) > disconnected. (00:00:08)

    10:01:31 - (not logged in) (TUNNEL_IP) > connected to ip : SERVER_IP
    10:01:31 - (not logged in) (TUNNEL_IP) > sending welcome message.
    10:01:31 - (not logged in) (TUNNEL_IP) > 220 Castor FTP Server ready ...
    10:01:32 - (not logged in) (TUNNEL_IP) > USER Castor
    10:01:32 - (not logged in) (TUNNEL_IP) > 331 Password required for Castor.
    10:01:34 - (not logged in) (TUNNEL_IP) > PASS xxxxxxxxxxxxx
    10:01:34 - Castor (TUNNEL_IP) > logged in.
    10:01:34 - Castor (TUNNEL_IP) > 230 User Castor logged in.
    10:01:37 - Castor (TUNNEL_IP) > SYST
    10:01:37 - Castor (TUNNEL_IP) > 215 UNIX Type: L8
    10:01:38 - Castor (TUNNEL_IP) > FEAT
    10:01:38 - Castor (TUNNEL_IP) > 500 'FEAT': command not understood.
    10:01:39 - Castor (TUNNEL_IP) > REST 100
    10:01:39 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 100.
    10:01:39 - Castor (TUNNEL_IP) > REST 0
    10:01:39 - Castor (TUNNEL_IP) > 350 REST supported. Ready to resume at byte offset 0.
    10:01:41 - Castor (TUNNEL_IP) > PWD
    10:01:41 - Castor (TUNNEL_IP) > 257 "/" is current directory.
    10:01:41 - Castor (TUNNEL_IP) > TYPE A
    10:01:41 - Castor (TUNNEL_IP) > 200 Type set to A.
    10:01:42 - Castor (TUNNEL_IP) > PASV
    10:01:42 - Castor (TUNNEL_IP) > 227 Entering Passive Mode (SERVER_IP,13,134).
    10:01:44 - Castor (TUNNEL_IP) > PORT TUNNEL_IP,4,185
    10:01:44 - Castor (TUNNEL_IP) > 200 Port command successful.
    10:01:44 - Castor (TUNNEL_IP) > LIST -aLR
    10:01:44 - Castor (TUNNEL_IP) > 150 Opening data connection for directory list.

    10:03:05 - Castor (TUNNEL_IP) > NOOP
    10:03:05 - Castor (TUNNEL_IP) > 200 NOOP command successful.
    10:03:57 - Castor (TUNNEL_IP) > NOOP
    10:03:57 - Castor (TUNNEL_IP) > 200 NOOP command successful.


    .O  Sauvez-moi, mangez Mary :-D
    (_)__
    ... Castor
    0
  3. Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   170
     
    Pour clarifier il y a quatre IP prises en compte:
    SERVER_IP: ip du serveur ftp a atteindre
    TUNNEL_IP: ip de la machine sur laquelle est ouvert le tunnel ssh
    CLIENT_IP: ip de la machine sur laquelle est le client ftp (IP Reelle)
    INTERNET_IP: ip natée de la machine cliente (seule IP publique des quatre)

    apparement le serveur apprecie pas les commandes "PORT" sauf si je lui force l'ip du tunnel
    dans ce cas il accepte mais je recois rien :(

    .O  Sauvez-moi, mangez Mary :-D
    (_)__
    ... Castor
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   170
     
    bon alors j'ai trouve une méthode qui me plait moyen moyen en fait...
    http://people.ece.cornell.edu/schuh/tunnelssh/

    cependant cela oblige d'une part d'avoir un serveur ssh sur la machine fournissant le service ftp
    d'autre part d'utiliser le client "SSH Secure Shell" (je n'ai pas reussi avec PuTTY)

    .O  Sauvez-moi, mangez Mary :-D
    (_)__
    ... Castor
    0
    1. fred
       
      salut,
      je vient de faire un test avec un serveur 2000 sur lequel j'ai installé cygwin en couche linux avec openssh.
      sftp marche nickel surt le port 22
      putty fourni le client psftp qui devrait resoudre tes problemes
      0
    2. Castor Messages postés 17881 Date d'inscription   Statut Modérateur Dernière intervention   170
       
      merci fred je vai tenter avec le client sftp de PuTTy

      Cependant cela permet de contourner le probleme, pas de le resoudre.
      je m'explique:
      le but serait de pouvoir utiliser ces tunnels SANS installer un serveur ssh sur chacun des serveurs ftps disponibles...

      .O  Sauvez-moi, mangez Mary :-D
      (_)__
      ... Castor
      0