USING FTP FROM OUTSIDE THE SECURITY PERIMETER



         There has been some confusion as to what the security perimeter will allow and disallow so we will try to
clear that up. Each of you has a directory on acd.ucar.edu that you can put files in so that anyone can
come in via a web browser (or any other FTP client) and pull files off without the need for any encryption at
all. That directory is located in /web/ftp/user/user_name (where 'user_name' is replaced by your username).
To use a web browser to download from those directories, you would type in the following URL to see a
listing of the directory:

        ftp://acd.ucar.edu/user/user_name/

   That is the only incoming, unencrypted ftp connection that is allowed so, as many of you have found out, that
process will not work to FTP into your home directory on acd.ucar.edu. To do that, you will need a secure form
of the protocol. For windows, there a number of choices but I have narrowed those down to just two.

        WINSCP has a (GUI) Graphical User Interface and is based on the scp (secure copy) protocol. It is available
at the following URL and behaves much like wsftp with a point, click and drag oriented interface (make sure you
download version 2.0 beta):
        http://winscp.vse.cz/eng/download.php
 
(NOTE: Once you have opened up winscp you will need to click on the "advanced" tab and set the "preferred ssh protocol version"
to 2. This change is documented in a screen shot (click here). The only other things to remember are to set the "hostname" to
"acd.ucar.edu" and enter your username and password where prompted. These entries are also documented in a screen shot (click
here) ).

        Psftp is command line based but is very small and efficient and requires very little configuration. It works
just like the version that is built into windows and the common version you would find in linux. It can be found
here:
         http://the.earth.li/~sgtatham/putty/latest/x86/psftp.exe

 There is also one that I located for MAC OS X for which the details can be found at:
        http://www.gideonsoftworks.com/gideon.html
 
 

YOU ARE STRONGLY ENCOURAGED TO SET THIS UP AND TEST IT BEFORE
YOU LEAVE ON A FIELD MISSION AS THERE IS LITTLE WE CAN DO TO HELP
ONCE YOU LEAVE NCAR.