this post was submitted on 06 Jan 2025
12 points (92.9% liked)

Linux

8415 readers
160 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 2 years ago
MODERATORS
MigratingtoLemmy@lemmy.world
12
MySecureShell: Still/Ever a sound solution? (lemmy.world)
submitted 5 days ago by Zachariah@lemmy.world to c/linux@lemmy.world
9 comments fedilink hide all child comments
 

I'd appreciate any thoughts anyone has on MySecureShell.

I used it about eight years ago, and it was exactly what I wanted. I know I can create a sftp chroot jail using OpenSSH, but MySecureShell has additional features I really like.

I like that the config is all in one place. I like that the user can only use sftp and only sees a specified directory and it's contents. I like that I can limit simultaneous connections and rate limit the bandwidth over all and per user. It's compatible with fail2ban and ssh keys (instead of username-password login).

Unfortunately, it looks like the last update was five years ago. I guess this could mean it's mature and secure, but I'm not sure.

The last reply in mysecureshell/Issues was this year, but it was not by the maintainer. The maintainer, deimosfr, is still active on github, having contributed last in December, 2024. User Teka101 has contributed to the project at least once and last replied to an issue a year ago.

The documentation says it's for 1.33, but the version in the Ubuntu repo is 2.0

I'm on a much faster connection now, so I guess I could live without the limiting functionality.

I guess I'm looking for any reasons I should or should not consider using MySecureShell again. It'll just be for half a dozen friends for when I want to give them larger files, or if I want them to send me full-resolution photos.

I'm on Xubuntu 24.04 and would open a port on my router to allow connections (some high number mapped to 22 on this machine), or possibly give my friends access to my LAN via WireGuard but limit it to this machine.

you are viewing a single comment's thread
view the rest of the comments
[–] krnl386@lemmy.ca 2 points 4 days ago (1 children)

Have you looked at the mod_sftp for ProFTPd? It seems like ProFTPd is alive and well, despite its official site not supporting HTTPS! It seems like mod_sftp supports most of the SSH/SFTP-specific features, whereas ProFTPd may also offer additional features that complement the mod_sftp module. All in all, probably not a 100% match, and definitely not a drop-in replacement, but at least a seemingly viable/supported alternative?

[–] Zachariah@lemmy.world 2 points 4 days ago

Thank you. I’ll take a look.