scp party aleina@rabbitmytrekcom:/birthday/party in Software

Maker Code 39 Full ASCII in Software scp party aleina@rabbitmytrekcom:/birthday/party

Of particular interest is the -r option (recursive), which enables you to copy whole directories See the scp Man page for a complete list of options In the next example, the user copies the entire reports directory to the user justin s projects directory:

19:

In the next example, the user george copies the mydoc1 file from the user cecelia s home directory:

[george@turtle george]$ scp cecelia@turtlemytrekcom:mydoc1 cecelia@turtlemytrekcom's password: mydoc1 0% | | 0 --:-ETA mydoc1 100% |*****************************| 17 00:00 [george@turtle george]$

From a Windows system, you can also use scp clients such as winscp, which will interact with Linux scp-enabled systems

With sftp, you can transfer FTP files secured by encryption The sftp program uses the same commands as ftp This client, which works only with ssh version 2, operates much like ftp, with many of the same commands Use sftp instead of ftp to invoke the sftp client

To use the sftp client to connect to an FTP server, that server needs to be operating the sftp-server application The ssh server invokes sftp-server to provide encrypted FTP transmissions to those using the sftp client The sftp server and client use the SSH File Transfer Protocol (SFTP) to perform FTP operations securely

Port Forwarding (Tunneling)

If, for some reason, you can connect to a secure host only by going through an insecure host, ssh provides a feature called port forwarding With port forwarding, you can secure the insecure segment of your connection This involves simply specifying the port at which the insecure host is to connect to the secure one This sets up a direct connection between the local host and the remote host, through the intermediary insecure host Encrypted data is passed through directly This process is referred to as tunneling, creating a secure tunnel of encrypted data through connected servers You can set up port forwarding to a port on the remote system or to one on your local system To forward a port on the remote system to a port on your local system, use ssh with the -R option, followed by an argument holding the local port, the remote host address, and the remote port to be forwarded, each separated from the next by a colon This works by allocating a socket to listen to the port on the remote side Whenever a connection is made to this port, the connection is forwarded over the secure channel, and a connection is made to a remote port from the local machine In the following example, port 22 on the local system is connected to port 23 on the rabbitmytrekcom remote system:

ssh -R 22:rabbitmytrekcom:23

To forward a port on your local system to a port on a remote system, use the ssh -L option, followed by an argument holding the local port, the remote host address, and the remote port to be forwarded, each two arguments separated by a colon A socket is allocated to listen to the port on the local side Whenever a connection is made to this port, the connection is forwarded over the secure channel and a connection is made to the remote

Part V:

port on the remote machine In the following example, port 22 on the local system is connected to port 23 on the rabbitmytrekcom remote system:

ssh -L 22:rabbitmytrekcom:23

You can use the LocalForward and RemoteForward options in your ssh/config file to set up port forwarding for particular hosts or to specify a default for all hosts you connect to

The SSH configuration file for each user is in their ssh/config file The /etc/ssh/ssh_config file is used to set sitewide defaults In the configuration file, you can set various options, as listed in the ssh_config Man document The configuration file is designed to specify options for different remote hosts to which you might connect It is organized into segments, where each segment begins with the keyword HOST, followed by the IP address of the host The following lines hold the options you have set for that host A segment ends at the next HOST entry Of particular interest are the User and Cipher options Use the User option to specify the names of users on the remote system who are allowed access With the Cipher option, you can select which encryption method to use for a particular host Encryption methods include IDEA, DES (standard), triple-DES (3DES), Blowfish (128 bit), Arcfour (RSA s RC4), and Twofish The following example allows access from larisa at turtlemytrekcom and uses Blowfish encryption for transmissions: