SFTP over Internet

[fedorauser15]

I need to implement SFTP to allow a few users the ability to upload/download files from the Internet. I've read that this will also open SSH (remote console) from the Internet as well.

Is this not a secure implementation, as in will it open a huge door for hackers?

Instead of requiring a username/password should I only allow key-based authentication (RSA)?

Can I restrict access for SSH (remote shell) to only a handful of IP's, but allow SFTP to everyone else?

Is it also possible to allow them SFTP access, but no shell access?

Thanks,
Fedora Newbie...

[sanjeevt]

hi
checkout proftpd, using mod_sftp module,

ProFTPD module mod_sftp

hope this helps
-Sanjeev

[fedorauser15]

Thank you for your response Sanjeev, but I wasn't really looking for specifics on how to configure SFTP. I was going to simply use the built-in SFTP functionality of OpenSSL (SSH).

My questions were more directed towards best practice and some security related concerns that I have.

Do you mind trying to answer some of the questions I asked?

Thanks again for you help.