"Reckhard, Tobias" wrote:
If you want use the server only internal, you can make a ssh tunnel.
No, you can't. You can make an SSH tunnel for the FTP control connection, but you can't make an SSH tunnel for the data connection. Unless you modify the FTP daemon and SSH source code, that is. If all you want to do is protect usernames and passwords, this may be fine with you. But the data (e.g. transferred files and directory listings) is transmitted in clear text without the protection against eavesdropping, injection or modification given by SSH.
Session Hijacking is also possible with the data connection. -- intraDAT AG http://www.intradat.com Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0 D - 60329 Frankfurt am Main Fax: +49 69-25629-256 Junk mail is war. RFCs do not apply.