RE: [fw-wiz] OT: FTP Servers

From: Bojan Zdrnja (Bojan.Zdrnja_at_LSS.hr)
Date: 06/09/03

  • Next message: woodse_at_vra.net: "[fw-wiz] Cisco Pix-IDS Blocking" 
    To: "'John Smith'" <john.smith@minolta-qms.com>, <firewall-wizards@honor.icsalabs.com>
Date: Mon, 9 Jun 2003 14:05:42 +1200

    Although it was already mentioned, I'd suggest proftpd.

    I found that one pretty stable and it has good security vulnerabilities
    history. Latest version are getting maybe a bit too many new features, but
    it is still the best ftpd IMHO.

    If you are concerned about security for accounts on your server and people
    will need access through ftp to them (not just anonymous read-only access),
    proftpd 1.2.8 supports TLS so you can use that to protect your data.

    You can find it at: http://www.proftpd.org

    Best regards,

    Bojan Zdrnja

    > -----Original Message-----
    > From: firewall-wizards-admin@honor.icsalabs.com
    > [mailto:firewall-wizards-admin@honor.icsalabs.com] On Behalf
    > Of John Smith
    > Sent: Saturday, 7 June 2003 6:51 a.m.
    > To: firewall-wizards@honor.icsalabs.com
    > Cc: john.smith@minolta-qms.com
    > Subject: [fw-wiz] OT: FTP Servers
    >
    >
    > All,
    >
    > I have been tasked to build a FTP server. I have
    > selected the OS (a
    > Unix variant that I know how to strip down to bare bones). The last
    > time I built a Unix FTP server (roughly five years ago) I
    > used WU-FTPD.
    >
    > My question is this: Is WU-FTPD still a good FTP server
    > to use? The
    > pros are I am experienced with it and it works very well in
    > installations I have done. The (potential) con is the fact
    > that there
    > hasn't been a new release of the code since 11/2001 (2.6.2).
    > I haven't
    > seen new exploits for it, so I don't know if the code is that
    > stable or
    > if it isn't being maintained anymore. The home page
    (www.wu-ftpd.org)
    was last updated 2/18/2003.

        If WU-FTPD is not a good FTP server to use or there are better (i.e.
    - more secure) servers out there, what would you suggest? The needs for
    the site are anonymous FTP, potentially some 'real' FTP users, and up to
    500 simultaneous FTP connections. And of course the FTP server should
    be free. :-)

        Thank you.

    John

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: woodse_at_vra.net: "[fw-wiz] Cisco Pix-IDS Blocking"

    Relevant Pages

    • Re: Microsoft FTP Server problem on W2K?
      ... It is a UNISYS ClearPath mainframe system that is trying to FTP using ... passive mode to a MS FTP server. ... Currently the mainframe FTPs in ACTIVE mode. ... Since the mainframe pushes files to our customers over a WAN connection, ...
      (microsoft.public.inetserver.iis.security)
    • Re: FTP Upload
      ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
      (microsoft.public.dotnet.framework.aspnet)
    • RE: FTP Upload
      ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
      (microsoft.public.dotnet.framework.aspnet)
    • RE: vsftpd beginners tutorial?
      ... # This file was created to illustrate the steps needed to create a new FTP ... Why vsftpd as this FTP Server? ... System software customization considerations. ... User and Group Configuration ...
      (RedHat)
    • Re: IPSwitch, Inc. WS_FTP Server
      ... > bounce attack as well as PASV connection hijacking. ... > The FTP bounce vulnerability allows a remote attacker to cause the ... > anonymously along with any internal addresses that the FTP server has ... That means it's got to handle a PORT ...
      (Bugtraq)