Hi All,
After our FTP server was hacked I'm looking for a secure way for clients to send us large backups. They can be 100Mb-2Gb in size but they will be downloaded and deleted fairly quickly. No permanent storage is needed, on our old server files were deleted at midnight.
Ideally we would give each of our dealers a single login/pass and they will upload using a web browser on the clients site. We are only talking about a dozen logins.
Would something like DropBox work? I've never used it, but £10/user/month seems a bit high.
Looking for something more secure than a FTP server!
Paul, I posted this a few weeks ago but take a look at SendAnywhere. It may well fulfil your requirements.
Send a file which gives you a key for the receiver to apply and the file then gets automatically sent. Max Size 4Gb and totally free.
Dave
-----Original Message----- From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Paul Hill Sent: 23 May 2017 11:54 To: ProFox Email List profox@leafe.com Subject: Recommendations for temporary file storage
Hi All,
After our FTP server was hacked I'm looking for a secure way for clients to send us large backups. They can be 100Mb-2Gb in size but they will be downloaded and deleted fairly quickly. No permanent storage is needed, on our old server files were deleted at midnight.
Ideally we would give each of our dealers a single login/pass and they will upload using a web browser on the clients site. We are only talking about a dozen logins.
Would something like DropBox work? I've never used it, but £10/user/month seems a bit high.
Looking for something more secure than a FTP server!
-- Paul
_______________________________________________ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/CADwx0++e-yJFZ7D8SA7hzU1xGKuwutJj5tXS... ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
This is an amazing tool. Just found it based on someone's recommendation (maybe I saw it here on ProFoxTech) and I love it. It has solved a big problem for me in terms of logging in to remote systems (especially with RDP) to pull test files or export files and then transferring them to my machine. Before I had to either use webmail for small files, or install FTP software for larger files. But with Send-Anywhere.com, I can have the files in just a few minutes and never have to install software on someone else's machine. When I can use GotoAssist it's not a problem because there is a built in file transfer, but in those cases when I cannot use GotoAssist, this tool is a great alternative. I've been telling clients about it and they seem to like it as well. Works well with iPhones too.
Unfortunately, I think OP was looking for something that wouldn't require any input from his side to confirm the uploads or start them. Not sure you can automate the process with Send-Anywhere.
Paul H. Tarver Tarver Program Consultants, Inc.
-----Original Message----- From: Dave Crozier [mailto:DaveC@Flexipol.co.uk] Sent: Tuesday, May 23, 2017 6:00 AM To: profoxtech@leafe.com Subject: RE: Recommendations for temporary file storage
Paul, I posted this a few weeks ago but take a look at SendAnywhere. It may well fulfil your requirements.
Send a file which gives you a key for the receiver to apply and the file then gets automatically sent. Max Size 4Gb and totally free.
Dave
-----Original Message----- From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Paul Hill Sent: 23 May 2017 11:54 To: ProFox Email List profox@leafe.com Subject: Recommendations for temporary file storage
Hi All,
After our FTP server was hacked I'm looking for a secure way for clients to send us large backups. They can be 100Mb-2Gb in size but they will be downloaded and deleted fairly quickly. No permanent storage is needed, on our old server files were deleted at midnight.
Ideally we would give each of our dealers a single login/pass and they will upload using a web browser on the clients site. We are only talking about a dozen logins.
Would something like DropBox work? I've never used it, but £10/user/month seems a bit high.
Looking for something more secure than a FTP server!
-- Paul
[excessive quoting removed by server]
Paul,
Check out rsync.net. FTP, SFTP, SCP, and rsync. Affordable, secure. Great customer support. Highly recommended.
Another alternative: AWS S3 buckets.
Malcolm
On 23 May 2017 at 12:15, AndyHC andy@hawthorncottage.com wrote:
scp/winscp over ssh/Putty SSH ?
On 23 May 2017 at 13:27, Malcolm Greene profox@bdurham.com wrote:
Paul,
Check out rsync.net. FTP, SFTP, SCP, and rsync. Affordable, secure. Great customer support. Highly recommended. Another alternative: AWS S3 buckets.
Thanks. I could host my own box but I don't want to maintain it. Also need a solution where uploading files does not need any special tools.
On 23 May 2017 at 11:59, Dave Crozier DaveC@flexipol.co.uk wrote:
Paul, I posted this a few weeks ago but take a look at SendAnywhere. It may well fulfil your requirements.
Send a file which gives you a key for the receiver to apply and the file then gets automatically sent. Max Size 4Gb and totally free.
Thanks, I'll investigate. Looks a bit suspect. What's the catch?
Paul, No catch found here apart from the fact that you can't receive until you accept the generated code at the sending end.
Used it a lot here for really large graphics files and it works well. Also have used it a lot to xfer pictures from phones which is sometimes a pain in the a*se, especially with iPhones.
Dave
-----Original Message----- From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Paul Hill Sent: 23 May 2017 17:18 To: ProFox Email List profox@leafe.com Subject: Re: Recommendations for temporary file storage
On 23 May 2017 at 12:15, AndyHC andy@hawthorncottage.com wrote:
scp/winscp over ssh/Putty SSH ?
On 23 May 2017 at 13:27, Malcolm Greene profox@bdurham.com wrote:
Paul,
Check out rsync.net. FTP, SFTP, SCP, and rsync. Affordable, secure. Great customer support. Highly recommended. Another alternative: AWS S3 buckets.
Thanks. I could host my own box but I don't want to maintain it. Also need a solution where uploading files does not need any special tools.
On 23 May 2017 at 11:59, Dave Crozier DaveC@flexipol.co.uk wrote:
Paul, I posted this a few weeks ago but take a look at SendAnywhere. It may well fulfil your requirements.
Send a file which gives you a key for the receiver to apply and the file then gets automatically sent. Max Size 4Gb and totally free.
Thanks, I'll investigate. Looks a bit suspect. What's the catch?
So, you want:
- secure file transfer - little to no cost - no client side software
Do you have a web site/hosting machine now? A simple website with basic authentication and https file transfer could be all you need.
Oh, later in the thread, I see you say "Thanks. I could host my own box but I don't want to maintain it."
Okie-dokey. Would you pay someone else to maintain the host? How much?
Anyone who does maintain a web site ought to be willing to do this for you, for less than the £10/user/month charge that a dropbox would.
On Tue, May 23, 2017 at 6:53 AM, Paul Hill paulroberthill@gmail.com wrote:
Hi All,
After our FTP server was hacked I'm looking for a secure way for clients to send us large backups. They can be 100Mb-2Gb in size but they will be downloaded and deleted fairly quickly. No permanent storage is needed, on our old server files were deleted at midnight.
Ideally we would give each of our dealers a single login/pass and they will upload using a web browser on the clients site. We are only talking about a dozen logins.
Would something like DropBox work? I've never used it, but £10/user/month seems a bit high.
Looking for something more secure than a FTP server!
-- Paul
[excessive quoting removed by server]
On 24/05/2017 15:00, Ted Roche wrote:
<snip> Oh, later in the thread, I see you say "Thanks. I could host my own box but I don't want to maintain it."
Okie-dokey. Would you pay someone else to maintain the host? How much?
Anyone who does maintain a web site ought to be willing to do this for you, for less than the £10/user/month charge that a dropbox would.
When I signed up for dropbox it was (and still is for me) free. Think you got 2gb. Or you could sign up for a google account and get a 15gb google drive for free. Also if you have signed up for office 365 that comes with a free 5gb onedrive.
Peter
This communication is intended for the person or organisation to whom it is addressed. The contents are confidential and may be protected in law. Unauthorised use, copying or disclosure of any of it may be unlawful. If you have received this message in error, please notify us immediately by telephone or email.
www.whisperingsmith.com
Whispering Smith Ltd Head Office:61 Great Ducie Street, Manchester M3 1RR. Tel:0161 831 3700 Fax:0161 831 3715
London Office:17-19 Foley Street, London W1W 6DW Tel:0207 299 7960
On 24 May 2017 at 15:00, Ted Roche tedroche@gmail.com wrote:
So, you want:
- secure file transfer
- little to no cost
- no client side software
I never mentioned little or no cost. I said that £10/user/month seems a bit high. In fact I was put off by Dave's suggestion because it is 'free'.
Do you have a web site/hosting machine now? A simple website with basic authentication and https file transfer could be all you need.
We took it down because it was hacked. Soon we are having a security audit so don't want to chance it.
Oh, later in the thread, I see you say "Thanks. I could host my own box but I don't want to maintain it."
Okie-dokey. Would you pay someone else to maintain the host? How much?
A reasonable amount. £120 a month (assuming a dozen users) seems a bit high. We could host a server in our office (100Mb/s bandwidth up and down) but I don't want to chance it, hence a 3rd party solution would be ideal.
On Wed, May 24, 2017 at 2:21 PM, Paul Hill paulroberthill@gmail.com wrote:
In fact I was put off by Dave's suggestion because it is 'free'.
Totally agree. My first thought was, if it is free to the users, where is it they make their money? Bandwidth is not free.
A reasonable amount. £120 a month (assuming a dozen users) seems a bit high. We could host a server in our office (100Mb/s bandwidth up and down) but I don't want to chance it, hence a 3rd party solution would be ideal.
My favorite hosting company, Linode, offers: London, UK, $10/mo (£7.72), 30 Gb storage, 2 TB monthly transfer, you might need a bit more, plus some fees for daily log review, maintenance, upkeep, markup, overhead, plus the one-time costs of configuring the app (inclined to think it could be done with VSFTP over SSL/TLS) plus configure the SSL cert, as I don't think a free cert would work, though a self-signed might...
It shouldn't cost an arm-and-a-leg, but the biggest challenge will be getting a reliable host and a reliable hostmaster willing to charge an hour a month. I'd suggest you troll around for a local Linux hostmaster, or someone who has the ability to work in UK and knows how to spell VAT (*shudder*).
--- Ted Roche & Associates, LLC http://www.tedroche.com
OK, never mind. Since web browsers let you browse ftp sites, I made the foolish ASSuMption that ftps (NOT SFTP!) would work the same way, since it's ftp-over-ssl and browsers support ftp and browsers support ssl, why not both? But I'm wrong; it appears you need a custom tool like filezilla or winscp to manage FTPS, and if you're doing that, then you ought to just set up an actually secure file transfer setup with SFTP. And one of your requirements was "no end-user tools."
So, I withdraw the suggestion.
It appears that something like Dropbox, GoogleDrive or OneDrive is your best choice. Or the SendAnywhere thing.
On Wed, May 24, 2017 at 4:17 PM, Ted Roche tedroche@gmail.com wrote:
On Wed, May 24, 2017 at 2:21 PM, Paul Hill paulroberthill@gmail.com wrote:
In fact I was put off by Dave's suggestion because it is 'free'.
Totally agree. My first thought was, if it is free to the users, where is it they make their money? Bandwidth is not free.
A reasonable amount. £120 a month (assuming a dozen users) seems a bit high. We could host a server in our office (100Mb/s bandwidth up and down) but I don't want to chance it, hence a 3rd party solution would be ideal.
My favorite hosting company, Linode, offers: London, UK, $10/mo (£7.72), 30 Gb storage, 2 TB monthly transfer, you might need a bit more, plus some fees for daily log review, maintenance, upkeep, markup, overhead, plus the one-time costs of configuring the app (inclined to think it could be done with VSFTP over SSL/TLS) plus configure the SSL cert, as I don't think a free cert would work, though a self-signed might...
It shouldn't cost an arm-and-a-leg, but the biggest challenge will be getting a reliable host and a reliable hostmaster willing to charge an hour a month. I'd suggest you troll around for a local Linux hostmaster, or someone who has the ability to work in UK and knows how to spell VAT (*shudder*).
Ted Roche & Associates, LLC http://www.tedroche.com
In my experience most end users ARE Tools so to say no Tools is somewhat of an oxymoron!
;-)
Dave
-----Original Message----- From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Ted Roche Sent: 26 May 2017 13:16 To: profox@leafe.com Subject: Re: Recommendations for temporary file storage
OK, never mind. Since web browsers let you browse ftp sites, I made the foolish ASSuMption that ftps (NOT SFTP!) would work the same way, since it's ftp-over-ssl and browsers support ftp and browsers support ssl, why not both? But I'm wrong; it appears you need a custom tool like filezilla or winscp to manage FTPS, and if you're doing that, then you ought to just set up an actually secure file transfer setup with SFTP. And one of your requirements was "no end-user tools."
So, I withdraw the suggestion.
It appears that something like Dropbox, GoogleDrive or OneDrive is your best choice. Or the SendAnywhere thing.
On Wed, May 24, 2017 at 4:17 PM, Ted Roche tedroche@gmail.com wrote:
On Wed, May 24, 2017 at 2:21 PM, Paul Hill paulroberthill@gmail.com wrote:
In fact I was put off by Dave's suggestion because it is 'free'.
Totally agree. My first thought was, if it is free to the users, where is it they make their money? Bandwidth is not free.
A reasonable amount. £120 a month (assuming a dozen users) seems a bit high. We could host a server in our office (100Mb/s bandwidth up and down) but I don't want to chance it, hence a 3rd party solution would be ideal.
My favorite hosting company, Linode, offers: London, UK, $10/mo (£7.72), 30 Gb storage, 2 TB monthly transfer, you might need a bit more, plus some fees for daily log review, maintenance, upkeep, markup, overhead, plus the one-time costs of configuring the app (inclined to think it could be done with VSFTP over SSL/TLS) plus configure the SSL cert, as I don't think a free cert would work, though a self-signed might...
It shouldn't cost an arm-and-a-leg, but the biggest challenge will be getting a reliable host and a reliable hostmaster willing to charge an hour a month. I'd suggest you troll around for a local Linux hostmaster, or someone who has the ability to work in UK and knows how to spell VAT (*shudder*).
Ted Roche & Associates, LLC http://www.tedroche.com
-- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com
_______________________________________________ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/CACW6n4vUbAN=9Hri_CfdNZxjvOVTWMXuoFB4... ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
LOL.
On Fri, May 26, 2017 at 7:24 AM, Dave Crozier DaveC@flexipol.co.uk wrote:
In my experience most end users ARE Tools so to say no Tools is somewhat of an oxymoron!
;-)
Dave
-----Original Message----- From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Ted Roche Sent: 26 May 2017 13:16 To: profox@leafe.com Subject: Re: Recommendations for temporary file storage
OK, never mind. Since web browsers let you browse ftp sites, I made the foolish ASSuMption that ftps (NOT SFTP!) would work the same way, since it's ftp-over-ssl and browsers support ftp and browsers support ssl, why not both? But I'm wrong; it appears you need a custom tool like filezilla or winscp to manage FTPS, and if you're doing that, then you ought to just set up an actually secure file transfer setup with SFTP. And one of your requirements was "no end-user tools."
So, I withdraw the suggestion.
It appears that something like Dropbox, GoogleDrive or OneDrive is your best choice. Or the SendAnywhere thing.
On Wed, May 24, 2017 at 4:17 PM, Ted Roche tedroche@gmail.com wrote:
On Wed, May 24, 2017 at 2:21 PM, Paul Hill paulroberthill@gmail.com
wrote:
In fact I was put off by Dave's suggestion because it is 'free'.
Totally agree. My first thought was, if it is free to the users, where is it they make their money? Bandwidth is not free.
A reasonable amount. £120 a month (assuming a dozen users) seems a bit
high.
We could host a server in our office (100Mb/s bandwidth up and down) but I don't want to chance it, hence a 3rd party solution would be ideal.
My favorite hosting company, Linode, offers: London, UK, $10/mo (£7.72), 30 Gb storage, 2 TB monthly transfer, you might need a bit more, plus some fees for daily log review, maintenance, upkeep, markup, overhead, plus the one-time costs of configuring the app (inclined to think it could be done with VSFTP over SSL/TLS) plus configure the SSL cert, as I don't think a free cert would work, though a self-signed might...
It shouldn't cost an arm-and-a-leg, but the biggest challenge will be getting a reliable host and a reliable hostmaster willing to charge an hour a month. I'd suggest you troll around for a local Linux hostmaster, or someone who has the ability to work in UK and knows how to spell VAT (*shudder*).
Ted Roche & Associates, LLC http://www.tedroche.com
-- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com
[excessive quoting removed by server]
You could still use SSH tunnel to access the secured FTP server over a browser.
On Fri, May 26, 2017 at 8:16 PM, Ted Roche tedroche@gmail.com wrote:
OK, never mind. Since web browsers let you browse ftp sites, I made the foolish ASSuMption that ftps (NOT SFTP!) would work the same way, since it's ftp-over-ssl and browsers support ftp and browsers support ssl, why not both? But I'm wrong; it appears you need a custom tool like filezilla or winscp to manage FTPS, and if you're doing that, then you ought to just set up an actually secure file transfer setup with SFTP. And one of your requirements was "no end-user tools."
How was the FTP server set up? How was it hacked?
OpenSSH supports public key authentication and file transfers.
On Tue, May 23, 2017 at 6:53 PM, Paul Hill paulroberthill@gmail.com wrote:
After our FTP server was hacked I'm looking for a secure way for clients to send us large backups. They can be 100Mb-2Gb in size but they will be downloaded and deleted fairly quickly. No permanent storage is needed, on our old server files were deleted at midnight.
-
AndyHC -
Dave Crozier -
Malcolm Greene -
Man-wai Chang -
Paul H. Tarver -
Paul Hill -
Peter Cushing -
Stephen Russell -
Ted Roche