Encrypted File Server

[Littleodie914]

Hey guys, my roommate and I want to put together a Mac- or Linux-based file server. I have an old iBook lying around, so it can either run Mac OS X 10.3, or some version of Yellow Dog Linux. (I'd prefer to keep it a Mac system.)

I can set up our router to push requests on a certain port to that laptop, with a static IP, but we're concerned with file safety. We're going to be keeping all our personal information on there including any code projects, pictures, homework, etc. My roommate attends university, and will be accessing the server from the uni. wireless network. As such, privacy/encryption is a big concern for us. (We don't want people packet sniffing and getting any personal information or data.)

Does anyone have any suggestions for setting up this kind of server? Hopefully it will be a fun project. Thanks!

 

[Intell]

I suggest making it accessible via SSH. It works well and can be used for forward ports, execute commands remotely, and securely share filed. Just make sure you don't make the public port 22 or it'll get bombarded with failed login attempts.

 

[Littleodie914]

I suggest making it accessible via SSH. It works well and can be used for forward ports, execute commands remotely, and securely share filed. Just make sure you don't make the public port 22 or it'll get bombarded with failed login attempts.

And no one, given any amount of packet data, will be able to read any of the contents? Much of it will be plain-text files (code, notes, etc.) so it won't be very protected from a "human-eye" approach.

Edit: I've used apps like KisMAC before, so I know how easy it can be to intercept wireless traffic, especially plain-text downloads. Hence the unease.

 

[Intell]

As long as it's in SSH v2 and there is no man-in-the-middle attack or unauthorized sharing of the passwords/keys you'll fully encrypted.

 

[Littleodie914]

As long as it's in SSH v2 and there is no man-in-the-middle attack or unauthorized sharing of the passwords/keys you'll fully encrypted.

Thanks, I'm configuring the server using SSH v2 and password-protected DES keys.

One thing I would like clarified though - when using ssh-keygen to create the public/private key pairs, is it necessary that the keygen be run on the client machine? Hypothetically, could you run the keygen 5 times on the server, and then give those private keys to clients?

 

[Intell]

I'm not really sure. I don't use keys. I use the password digest encryption part.