Web Hosting Talk







View Full Version : Telnet vs ssh - Which & how?


BooBoo
03-20-2002, 12:21 PM
I see many postings that say to telnet and others that indicate that ssh is better. I downloaded Tera Term Pro, added the ssh DLL and executable to try ssh. I can telnet and FTP to the RaQ3, but I am not able to ssh. I get the message that the connection was refused.

My question is, why is ssh better than telnet and why is my connection being refused?

Also, where do I learn the commands to be used while telnetting? I have tried some of the commands, but I get error messages that indicate the commands are not commands. I know that they are Unix commands, but where can I get information about these commands?

blacknight
03-20-2002, 01:42 PM
What I have been advised is that SSH is more secure than telnet, as it uses encryption of some sort. I gather that the telnet protocol had holes in it.
The commands are standard *nix commands.
Eg. ls to give a list of files, similar to dir in DOS
cp - copy file
mv - move
chmod - change permissions
etc. etc.
There's a short guide to the basics available on webmonkey and a quick search on Google will bring up a lot more.

Word of warning - if you don't know what you're doing try playing around as a user first NOT root.

mlx
03-20-2002, 02:16 PM
Telnet sends everything, including the username and password you use to login in plaintext, SSH encrypts it.

Did you check if SSH is running?
You can do so using /etc/rc.d/init.d/sshd status

ffeingol
03-20-2002, 02:32 PM
ssh is not installed on RaQ's by default. There are ssh .pkg files available to be installed.

As mlx said, the issue with telnet is that everything is just sent in plain text.

Frank

jambler
03-20-2002, 05:11 PM
In a follow up of a reply above, not only does telnet send everything over the net in plain text, where any packet sniffing agent can catch and recompile your username, password, and session, but the telnetd has also had numorous remote and local exploits out which can compromise your entire server. SSH ( http://www.OpenSSH.org/ ) is by far a better product, it encrypts the session from the get go, so everything encluding your username and password are encrypted, with some very robust algorithms. you can also setup local user keys so that the login doesnt even use a password to login, just public and private keys. though id advise using both. another thing you should know is that SSH has two different protocols. SSH-1 and SSH-2. 1 is no where near as secure as two, so if you go with SSH limit its useage to SSH-2 only, also most exploits that come out for SSH are limited to the 1 protocol. Good luck, and please, by all means, use something that at least tries to be secure : ).

BooBoo
03-20-2002, 05:39 PM
I tried to use ssh, but found out that I need to install several packages at once. If I restored the RaQ with RaQ4 OS2, then what updates/packages will I need to install before installing the ssh package?

Also, why, when I telnet to the RaQ, I cannot see any directories?:bawling:

okihost
03-20-2002, 05:58 PM
Originally posted by BooBoo
I tried to use ssh, but found out that I need to install several packages at once. If I restored the RaQ with RaQ4 OS2, then what updates/packages will I need to install before installing the ssh package?

Also, why, when I telnet to the RaQ, I cannot see any directories?:bawling:

I dont believe you need to upgrade anything as far as the raq goes. As far as linux commands go I suggest you go out and buy a good Linux admin book at Amazon or something. If you know DOS it will be a little easier. Go to google and type something like "DOS to UNIX translation" or "DOS to UNIX commands" something like that and it should hold you over till you get a good book.

Chicken
03-20-2002, 10:39 PM
I'm not sure you need a book to get the basics. There are *many* newbie linux admin sites on the web (many). Google 'newbie linux' or anything even related to 'linux commands', etc., and you'll find plenty.