Unraid sftp server

[Trojanmantony]

I am trying to set up an sftp server so I can send files between me and friends I collaborate with on videos we edit.  I specifically want sftp with restrictions on what folders they can access.

 

Does this exist?  All I see is normal ftp server clients but I want the ssh connection.  Toggling it on and off would be nice as well.

[unijab]

chroot the user(s)

dont use the default port on your WAN

[jj9987]

There is no such thing as SFTP server. If you have SSH access, you have SFTP access. SFTP is just FTP over SSH tunnel.

 

Just tested, I can log in with root account fine. Other users are meant only for accessing shares via SMB/NFS/CIFS.

[jj9987]

10 minutes ago, unijab said:

chroot the user(s)

dont use the default port on your WAN

I wouldn't expose an unRAID server to the outside at all. It does not have a lot of security built-in, as it is designated to be used in a safe/trusted environment.

[Jarsky]

If you're going to do that, make a VM with something like Ubuntu or CentOS, then mount the unRAID share you want to use for the "FTP Folder" into the VM.

If you're going to go this path, the least you will want to do is to ensure that iptables/firewalld and fail2ban are installed - and i would recommend using RSA key based authentication for users connecting to the SFTP using SHA256.

[Trojanmantony]

On 5/15/2017 at 6:07 AM, jj9987 said:

I wouldn't expose an unRAID server to the outside at all. It does not have a lot of security built-in, as it is designated to be used in a safe/trusted environment.

 

20 hours ago, Jarsky said:

If you're going to do that, make a VM with something like Ubuntu or CentOS, then mount the unRAID share you want to use for the "FTP Folder" into the VM.

If you're going to go this path, the least you will want to do is to ensure that iptables/firewalld and fail2ban are installed - and i would recommend using RSA key based authentication for users connecting to the SFTP using SHA256.

I noticed Paul's hardware is using btsync to send files to his video editor, and as I am looking to do the same would this solution also add some security to sharing files with somebody off the nas?