How FTP works.

FTP is based on a client-server configuration. Therefore, it allows you to transmit information regardless of the operating system you use. Even the system used by the hosting provider (Windows, Linux, MAC, etc.) is not relevant. To be able to use it, it is necessary to have a server and also a client. Check our tutorials to learn more about each type.

The communication is initiated when a connection is made from the client to the server. In addition, this connection is negotiated through the network port 21, also called control port. However, this will not be the port through which the information will be sent or downloaded. Indeed, this depends on the FTP mode selected.

FTP modes

Active mode: the server opens the initial connection. Consequently, it opens the connection on its port 20 and connects to the client on a random port greater than 1024. Moreover, this port is specified by the FTP client itself. Note that this is the least recommended option. Indeed, its use implies having a fairly wide range of ports open on your computer. It certainly carries many security risks.

Passive mode: the client opens the initial connection. In addition, it is the server that indicates which port to open. It will always be done on a network port greater than 1024 of the servers. Therefore, it is not necessary to have open ports on the computer. This is logical, since it will be the server that will open the connection.

We have already mentioned that the FT protocol was created several years ago. Even before hackers existed. Therefore, it was not recognized as a secure protocol. In fact, the information that travels between computer and server is in plain text. That is, without any kind of encryption.

What does the lack of encryption imply?

Well, this implies a considerable risk that the data will be captured. Indeed, an attacker could see our connection data and even view the information we are uploading. Even worse, they could download it using a Sniffer type software. These tools are capable of scanning the network for vulnerabilities.

Suppose you make a connection using plain FTP. As a result, you will see a warning that the connection is not secure. We have established that the FTP connection is not secure at all. Because of this, two secure versions were subsequently born: FTPS and SFTP. Although they are almost the same acronym, they are not at all the same. Let’s take a look at what each one consists of.

Secure versions of FTP: FTPS and SFTP

What is FTPS?

FTPS works in the same way as conventional FTP. However, the main difference is that it has an SSL/TLS encryption layer underneath. Also, this layer is provided by a security certificate. It is known as Secure FTP and there are two types of connection:

• Explicit FTPS: This is the month used. In addition, we also recommend its use. A normal, unencrypted connection is made. However, before sending any sensitive data, TLS negotiation is required to encrypt the connection.
• Implicit FTPS: It is in disuse. In fact, it is not available on most servers. The negotiation of the secure connection is done before any FTP command is sent.

What is SFTP?

SFTP is a wholly different protocol from conventional FTP. Indeed, it is based on the SSH (Secure Shell) protocol. In addition, the entire connection is encrypted and made through network port 22. They differ not only in encryption. Additionally, it is a protocol with more functionalities than conventional FTP. For example, we have the execution of CLI (Command Line Interface) commands.

SFTP stands for Secure File Transfer Protocol. Through it, we can exchange encrypted data between the client and the server. It uses Secure Shell (SSH) for this purpose. In addition, we can not only transfer files via SFTP. Indeed, we can view directories, rename them or limit rights. An SFTP program allows you to upload files for your website to your webspace. We can even create a backup of the website with SFTP. With a SFTP program, you can also delete entire files and folders. Indeed, if you delete contents, they will no longer appear to visitors of your website. In short, SFTP is the successor to FTP. The major difference is greater security. This is indicated by the addition Secure.

Conclusion

Security is a fundamental concern in any technology environment. Certainly, in the world of hosting, it is an element that also depends on the provider. However, it is primarily an element to be taken care of by the user. Today we talked about the differences between FTP and SFTP. Logically, you may have noticed that the main difference is related to security. Therefore, it is not currently recommended using a conventional FTP connection to connect. There are certainly exceptions. For example, we can use them for specific cases for reasons of urgency. Mostly when we need a fast connection and do not have much time to configure it. Moreover, when the data to be shared is not sensitive.

Consequently, when you connect via FTP to upload or download data, remember to always do it via FTPS or SFTP. This way, we are taking care of our data. Please keep in mind that hackers are always on the prowl. Therefore, it is our duty to make things more difficult for them. See you soon!

The post What is the difference between FTP and SFTP? appeared first on Linux Windows and android Tutorials.

Installing Wget in Windows 10

Wget is a free tool and relatively simple to install in a Linux environment. Just type the appropriate commands to each distribution, and you’re done. However, when it comes to Windows, the situation changes. There are many installers and options that end up with installation errors. However, we’ve got this version that works properly. Go to this link and download version 1.11.4-1

Next, we proceed to run the installer. Just double click and the wizard will start, press next to continue:

Then accept the license terms, and click Next to continue the installation.

Select the folder where the program will be installed. Click next to continue the installation.

Next, select the components to install. To ensure proper operation, check both boxes and press Next to continue the installation.

Next, you can create direct access to the application and its respective location

You can install additional icons. Click Next to continue

Verify the installation options and press Install to finish the process.

Once the installation is finished, we will see the following screen.

Using Wget in Windows 10

Please note that Wget does not have a graphical interface, so you will have to use it through command in the CMD. To check that the program is actually installed, please go to the installation directory. Depending on the installation options selected, it should be as follows:

C:\Program Files (x86)\GnuWin32\bin

What we need to do is open a command prompt. With this intention, press the Win+R combination and type CMD

Once there, use the CD command to navigate to the file location mentioned above. Then type Wget to use the program.

Add environment variable

We have correctly installed Wget. However, to be able to use it we always have to navigate to the installation folder of the program. This is cumbersome, so if we want to use Wget from any directory, we need to add an environment variable. With this in mind, please follow this path: Control Panel>System and Security>System>Advanced system settings

On the next screen, choose Environment Variables

Next, we are going to create a new environment variable. With that intention, please select Path and press Edit.

On the next screen first select New, then Browse. You must select the address where the program is installed.

Press ok in each of the open windows, and we can run Wget every time we open a Command Prompt. It doesn’t matter which directory we’re in. Let’s test the Wget command, downloading its executable for windows 10. With this intention, we enter this command in the CMD

wget https://sourceforge.net/projects/gnuwin32/files/wget/1.11.4-1/wget-1.11.4-1-setup.exe/download

Using Wget in Windows Subsystem for Linux

We have already seen how to use bash in windows 10. Through WSL we can also use Wget natively. To do this, we’ll open ubuntu and run the following command:

 sudo apt-get install wget 

Enter your password, and wait while the program is installed. Now we are ready to use wget in Windows 10.

Finally, we have seen how to install Wget in Windows 10. We can do it natively or using the Windows Subsystem for Linux. Both methods are valid for using this powerful download tool. Not only will we have access to files, but also to complete pages so that they can run offline. All right, that’s it for now, if you have any questions, don’t hesitate to ask. We are here to serve! until next time!

The post How to install Wget in Windows 10 appeared first on Linux Windows and android Tutorials.

Prerequisites. Installing OpenSSH server.

To achieve better stability on our server, it is imperative to assign a static IP address. If you do not know how to do it, please look here. Furthermore, we are going to install the OpenSSH server, which will allow us to configure access to the SFTP server. Thereupon, it is necessary to enter the settings menu. And once there, select Apps.

Next, the menu corresponding to Apps and features will be displayed. In this window, click on manage optional features.

In the following window, please scroll down through the different options until you find OpenSSH Server. Check if the service is already installed, if it is not, click on Add a feature

A list of functions will appear, please navigate until you find OpenSSH Server and select it. Wait until the installation is completed.

Configuring the Ssh server to start at Windows startup.

All right, we have already installed both the agent and the OpenSSH server. Now, let is configure the services to be activated every time Windows starts. In order to do that, please press Windows +R, and type services.msc.

The service window will then open. Locate OpenSSH Authentication Agent and OpenSSH Server

In the column to the right of the service description, you can see the startup type. In my case, the authentication agent is disabled and the OpenSSH server is manual. What we are going to do is to automatically set the startup. With this in mind, do right-click over the service to enter properties.

In the next window, we have to select automatic in startup type and then click on apply. Finally, press Start to begin the service.

Please do the same procedure with the OpenSSH Authentication Agent.

Check server and client status.

After installing the services and setting up the autostart, we need to check their status. For that, we’ll open a PowerShell with administrator privileges and write the following:

 Get-Service -Name *ssh* 

If we have done everything right, we should see this message.

Connect to an SFTP server installed on Windows Server 2019, through OpenSSH.

We can connect to the SFTP server using a client like WinSCP, FTP Rush, in my case I will use FileZilla. Just go to the download page and select download client.

Run the file, and start the program. In the main window of the program, there are some boxes that we must fill with the credentials of the serve. In host type, the server name, in username adds the name of the user, type the password in the next box and finally type 22 on the Port box. Please note that at the time of installing the OpenSSH server, a firewall rule is automatically created. This rule opens port 22 to allow network access. For that reason, we have to set that number.

Finally, we have installed and configured the access to an SFTP server in Windows Server 2019. As can be seen, the procedure has been simplified since Microsoft included OpenSSH server in Windows 10 and later versions as Server 2019. Please visit our post about the expiration of accounts in Windows 10. And if you want to keep up with the latest technology, subscribe to our Telegram channel.

The post How to install an SFTP/SSH Server on Windows Server 2019. appeared first on Linux Windows and android Tutorials.