Compression support and Security

kimocrossman

2008-09-17 03:54:23

According to my hosting company due to security - SmartFTP may not support compression

From: pair Networks Support [mailto:support@pair.com]
Sent: Tuesday, September 16, 2008 8:17 AM
To: Kimo Crossman
Subject: Re: [V8Y6D6U] Compression still not supported in SFTP?

Hello,

Thank you for your patience.

It appears that SmartFTP is trying to enable compression prior to
authentication. We have this turned off for security reasons, and
compression should be enabled after authentication.


As we have no documenation on SmartFTP, we are not sure if this is
supported by the program. It appears that SFTP support was added just after
they're most recent release.

We would recommend contacting SmartFTP for more information, or select a
different FTP client that does support this (it appears that OpenSSH and
SecureFX both support it).

Best regards,
Krystal Z.
pair Networks, Inc.
support@pair.com
- 20 MySQL Databases with Webmaster Accounts and Higher
- Free Newsletter @ http://insider.pair.com/


>
> A log was in the email I sent as part of a previous message. Here is
> another copy.
>
> [08:18:22] SmartFTP v3.0.1021.7
> [08:18:27] Resolving host name "vroo.pair.com"
> [08:18:30] Connecting to 209.68.1.136 Port: 22
> [08:18:30] Starting SSH session. Remote Id: "SSH-2.0-OpenSSH_5.0"
> [08:18:31] Initiating key exchange.
> [08:18:32] Computing session key.
> [08:18:32] Key Exchange Algorithm: diffie-hellman-group-exchange-
> sha256
> [08:18:32] Key exchange completed.
> [08:18:32] Host Key Algorithm: ssh-rsa
> [08:18:32] Client to Server Encryption: aes256-ctr
> [08:18:32] Server to Client Encryption: aes256-ctr
> [08:18:32] Session HMAC: hmac-sha1
> [08:18:32] Client to Server Compression: none
> [08:18:32] Server to Client Compression: none

> [08:18:33] Authentication request. Method: "none"
> [08:18:33] Server supported authentications:
> publickey,password,keyboard-interactive
> [08:18:33] Authentication request. Method: "password"
> [08:18:33] User authentication successful.
> [08:18:33] SSH session established.
> [08:18:33] Connected to vroo.pair.com.
> [08:18:33] SFTP protocol version 3
> [08:18:33] Detected Server Software: OpenSSH
> [08:18:34] Resolving path "/usr/home/vdc620".
> [08:18:34] Path successfully resolved.
> [08:18:34] Reading directory "/usr/home/vdc620".
> [08:18:34] 2496 bytes transferred. (4.43 KB/s) (550 ms)
> [08:18:35] Directory listing complete.
> [08:18:35] Getting attributes of "/usr/home/vdc620/public_html".
> [08:18:35] Attributes successfully obtained.
> [08:18:35] Resolving path "/usr/home/vdc620/public_html".
> [08:18:35] Path successfully resolved.
> [08:18:35] Getting attributes of "/usr/home/vdc620/boxes".
> [08:18:35] Attributes successfully obtained.
> [08:18:35] Resolving path "/usr/home/vdc620/boxes".
> [08:18:35] Path successfully resolved.

mb

2008-09-17 13:30:23

Implemented delayed compression in the latest version:
https://www.smartftp.com/download

Regards,
Mat