SFTP

  • 14 Jul

    SFTP Allowed Algorithms in Limagito File Mover

    SFTP Set Allowed Algorithms in Limagito File Mover

    14th of July 2024

    By default, Limagito File Mover orders algorithms according to best practices, and pays attention to vulnerabilities such as the “Terrapin Attack”.

    The following algorithms are supported by Limagito File Mover when our second API Vendor – CK is selected:

    Hostkey:
    ssh-ed25519
    rsa-sha2-256
    rsa-sha2-512
    ecdsa-sha2-nistp256
    ecdsa-sha2-nistp384
    ecdsa-sha2-nistp521
    ssh-rsa
    ssh-dss
    Key Exchange:
    curve25519-sha256
    curve25519-sha256@libssh.org
    ecdh-sha2-nistp256
    ecdh-sha2-nistp384
    ecdh-sha2-nistp521
    diffie-hellman-group14-sha256
    diffie-hellman-group1-sha1
    diffie-hellman-group14-sha1
    diffie-hellman-group16-sha512
    diffie-hellman-group18-sha512
    diffie-hellman-group-exchange-sha256
    diffie-hellman-group-exchange-sha1

    Ciphers:
    aes128-ctr
    aes256-ctr
    aes192-ctr
    aes128-cbc
    aes256-cbc
    aes192-cbc
    aes128-gcm@openssh.com
    aes256-gcm@openssh.com
    twofish256-cbc
    twofish128-cbc
    blowfish-cbc
    (also chacha20-poly1305@openssh.com if explicitly allowed by the application)

    MAC Algorithms:
    hmac-sha2-256
    hmac-sha2-512
    hmac-sha1
    hmac-ripemd160
    hmac-sha1-96
    hmac-md5
    (also the following etm algorithms if explicitly allowed)
    hmac-sha1-etm@openssh.com
    hmac-sha2-256-etm@openssh.com
    hmac-sha2-512-etm@openssh.com

     

    Best Regards,

    Limagito Team

    #SFTP #managedfiletransfer #filetransfer #filemanagement

    By Limagito-Team SFTP
  • 17 Mar

    How to move files to different ftp folders under the same root

    How to move files to different ftp folders under the same root on the same server

    Q: Conditional destination request. We are looking for an easy way (one channel) to move files to different ftp folders (more than 100 folders) under the same root on the same server, where filename prefix (3 char) is the key to which folder. Prefix and folder name are different.

    A few examples:
    • BBL > folder1
    • ABB > folder2
    • BYR > folder4
    • BYP > folder5
    • DAT > folder6
    I have been looking at your blog post without finding anything like it. The list of prefixes and folders could be a text table in the script or in a csv file. Do you have a script for this?
    A: Yes this is possible, please have a look at the following screenshots. This setup can be used with other Sources and Destinations too.
    – We used a Windows folder as Source:
    limagito file mover windows folder as source
    – Open our Pascal Script option
    limagito file mover pascal script option

    Please enable and add the following ‘On Destination’ Pascal Script:

    • Please add the following script: link
      • The script strips the first 3 characters from the filename by using ‘copy(psFilename, 1, 3)’
      • The stripped part is compared with ‘BBL’, ‘ABB’ .. ‘DAT’
      • Depending on the result of the compare, a folder name is added to our variable psVSA ( pascal script Var String A )
      • This psVSA variable will be used in the Destination setup as parameter (%VSA, which contains data from psVSA)
    • You’ll need to adjust the folder names and add more prefixes if needed
    files to different ftp folders
    – In the FTP as Destination Setup, please adjust the ‘Create Subdir’ option to:   %VSA\%SFS
    • Here we used the %VSA parameter, set in the Pascal Script, which contains the desired subdirectory name
    limagito file mover destination setup
    – Feedback customer:

    That looks easy. Thank you very much.

    If you need any help with this new option, please let us know.

    Best Regards,

    Limagito Team

    #ftp #sftp #managedfiletransfer #filetransfer #filemanagement

  • 03 Feb

    Limagito File Mover mitigates Vulnerability to the SSH Terrapin Attack

    The SSH Terrapin Attack

    In Limagito File Mover v2024.2.3.0 we made some changes to mitigate the SSH Terrapin attack problem. We did this by modifying the selection of the default algorithms in the following ways:

      1. chacha20-poly1305@openssh.com is no longer included by default. It can be re-added by specifying “+chacha20-poly1305@openssh.com” in the new UncommonOptions property we added.
      2. We kept the “-cbc” encryption modes because potentially too many servers would be affected by eliminating these encryption algorithms.
      3. We no longer include the “-etm” MAC algorithms, which are:
        • hmac-sha1-etm@openssh.com
        • hmac-sha2-256-etm@openssh.com
        • hmac-sha2-512-etm@openssh.com

        The -etm MAC algorithms can be re-added by specifying “+ssh-hmac-etm” in the new UncommonOptions property.

    For more information about the Terrapin attack, see https://terrapin-attack.com/

    limagito file mover sftp setup SSH Terrapin Attack

    • In the following example I re-added the -etm MAC algorithms by specifying “+ssh-hmac-etm” in the new “Uncommon Options” property (Advanced Tab).

    limagito file mover sftp setup

    #sftp #ssh #managedfiletransfer #filetransfer #filemanagement

    If you need any help with this ‘Terrapin Attack’, please let us know.

    Best Regards,

    Limagito Team

    By Limagito-Team SFTP ,
1 2 3 4 11
SEARCH