From: "Paul Smedley" <ecs-isp@2rosenthals.com>
Subject: Re: [eCS-ISP] SSH for OS/2
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-661791@2rosenthals.com>
Message-ID: <869ea7ef-2715-f374-d4fb-28d889f82455@smedley.id.au>
Date: Tue, 7 Apr 2020 06:54:02 +0930
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.4.1
MIME-Version: 1.0
In-Reply-To: <list-661791@2rosenthals.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit

Hey Steven,

On 7/4/20 5:50 am, Steven Levine wrote:
> In <list-661154@2rosenthals.com>, on 04/06/20
>     at 09:00 PM, "Ian Manners" <ecs-isp@2rosenthals.com> said:
> 
> Last time I tested rsync over ssh, it did not work. Dave Saville and I
> were working on an updated ssh distro that would resolve this at the time
> of his passing.
> 
> What will work just fine is rsync via stunnel.  For security configure
> stunnel to do level 3 verification on the SSL cert presented by the
> client.  This is how I access several of the servers I manage.
> 
> What might work, is rsync via ssh port forwarding, although I've not
> tested this.  This is as secure as the ssh connnection.

The other option could be firewall rules, that only allow access to that 
port from specific IP addresses? (assuming the source of the rsync 
address is on a static IP).

Cheers,

Paul

-- 
This email was Anti Virus checked by Astaro Security Gateway. http://www.sophos.com