Help hosting SFTP server on WS2k3

[+Chsoriano Subscriber²]

I'm trying to setup an SFTP server on a WS2K3 box... never setup an SFTP server but after some looking, I found a program called FreeFTPd (trying to do this at no cost). I managed to get accounts setup (using both NT authentication and users setup in FreeFTPd) and it is working...

But it only works if an administrator account is logged into the server and if the FreeFTPd application is running. I installed it as a service but it's not working correctly. I can't leave a user logged on indefinitely because the domain automatically logs users off if inactive.

Any recommendations or advice? Is there a better way to do this?

Any help is greatly appreciated.

[+BudMan MVC]

well for starters I think you mean freeSFTPd not the freeFTPd if your wanting to use sftp.

Did you set it up as a system service when you installed it? Im not familiar with that specific product - what I would suggest if you want sftp run it on a linux box. Or run a linux virtual machine on your server -- this could be done free with say vmware server. This currently how I do it.

[+Chsoriano Subscriber²]

yeah, I've considered setting up a linux vm to host the sftp server, I am going to continue to mess around with it... I still have to secure the hardware for it, I'd rather have it on a physical box.

And yeah, it is installed as a system service, it appears in the service list, but I'm not sure if I have to configure it at all... now that I think about it I'll go check.

[+BudMan MVC]

I'll give it a play when I get home on my 2k8 box, but the linux box be it physical or virtual would be my choice for hosting sftp.

Also its a given as soon as you fire up a sftp server your going to get hit with brute force attempts. I would suggest only allowing public key auth vs passwords.

or at min run a script to block ips that try to bruteforce you, or both ;) Not sure how you would do that with these ports to windows for ssh/sftp

[offroadaaron]

Also its a given as soon as you fire up a sftp server your going to get hit with brute force attempts. I would suggest only allowing public key auth vs passwords.

or at min run a script to block ips that try to bruteforce you, or both ;) Not sure how you would do that with these ports to windows for ssh/sftp

Or change the ports from the standard ports.

[fusi0n]

Or change the ports from the standard ports.

+1

[+BudMan MVC]

Changing ports is not security - "Obscurity is not Security"

You can do that if you want -- but it does not secure anything, and can run into problems trying to connect from a location that blocks non standard ports.. Its common to block nonstandard outbound ports.

I would suggest you correctly secure your connection vs trying to just hide it. If you want to change the port as well, thats your choice but keep in mind that is not security method.