Opinions on ftp-server

Adam blueeskimo at gmx.net
Thu Jul 3 17:01:51 PDT 2003


On Thu, 2003-07-03 at 18:17, Per olof Ljungmark wrote:
> Not being entirely satisfied with the stock ftpd (i'm running 
> 4.6/4.7-REL) I'm interested in hearing some opinions on alternatives.
> 
> Access is for clients editing webpages, no anonymous. Number of users is 
> low so authorization through passwd is fine.
> 
> Stability and security is what I'm after.

Sounds like you want PureFTPd .. It's as secure as FTP can possibly be
(without using extras like SSL/TSL), and is extremely stable. In fact,
its the only popular FTPd that has NEVER had a root exploit. And, it
supports privilege seperation.

Note that the next major version is supposed to support SSL/TLS, but
this might not be released for a while.

What you want is a FTPd that supports the basics, without all the extra
'warez' features. It's those extra features that lead to security
problems and instability.

Anyhow, I would highly recommend you read through this page to make an
educated decision yourself:
http://www.linuxmafia.com/pub/linux/security/ftp-daemons

-- 
Adam <blueeskimo at gmx.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030703/a6d70b8e/attachment.bin


More information about the freebsd-questions mailing list