Re: Unique ssh/sftp requirement

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigF39560F3C13DCAA49E273A10
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable


That's a bit pointless, since it's always possible to do something like
tar cz /home/blah | ssh remote@host "tar xz" , i.e. tar something to
stdout, pipe through ssh and untar there from stdin.



Odaniel, Jim (Mission Systems) wrote:[color=blue]
> Hi,=20
> I have a unique ssh/sftp requirement. I have two networks
> separated by a firewall. I would like to allow anyone on my "internal"=[/color]
[color=blue]
> network to ssh to my "external" network but I would like to control who=[/color]
[color=blue]
> is allowed to sftp/scp files from my internal network to my external
> network. How can I do this? Is there a way to do this if my firewall
> doesn't support controlling such an activity? Will setting up some kin=[/color]
d[color=blue]
> of internal proxy/port forwarding server do the trick?=20
> =20
> The version that I am using is:
> OpenSSH_4.1, OpenSSL 0.9.7e 25 Oct 2004
> HP-UX Secure Shell - A.04.00.000=20
>
> Thanks for your help!=20
> Jim O'Daniel=20
> Unix Systems Administrator Northrop Grumman=20
> [email]Jim.odaniel@ngc.com[/email]=20
>
>
> =20[/color]


--=20
Q: How does the Polish Constitution differ from the American?
A: Under the Polish Constitution citizens are guaranteed freedom of
speech, but under the United States constitution they are
guaranteed freedom after speech.
-- being told in Poland, 1987
--=20

Public GPG key at blackhole.pca.dfn.de

GCS/IT d- s:+ a- C(+++)$ UL++++$ P+++(++++)$ L++(+++)$ !E- W+(+++)$
N+(++) o K w$ !O !M V PS(++)@ PE-(++)@ Y+ PGP++(+++) t(+) 5 X R tv--
b++(++++) DI++(++++) D++ G e++>+++++ h(+) r y+**



--------------enigF39560F3C13DCAA49E273A10
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEoj3Qxz0AbiB4HpQRAjAZAJ4iWA0UeSlyYisxPQM2fb8ESg+F0QCgpyLS
cfbZSO2i79GMqSybGZsgfbs=
=VFC+
-----END PGP SIGNATURE-----

--------------enigF39560F3C13DCAA49E273A10--