Re: Secure Servers (SMTP, POP3, FTP)

From: Kris Kennaway (kris@obsecurity.org)
Date: 02/11/01


Date: Sun, 11 Feb 2001 09:13:01 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Dominic Marks <dominic_marks@hotmail.com>


On Sun, Feb 11, 2001 at 11:39:01AM -0000, Dominic Marks wrote:

> 2. wu-Ftpd - Good security (bad History) excellent performance
> 3. ftpd - Dodgy security? Doesn't seem to be used very much

FreeBSD's ftpd has one of the best track records of all ftp servers.
The last known security problem was several years ago, which is more
than can be said for the other two you mentioned, both of which have
had multiple problems in the last 2 years. Use ftpd unless you need a
feature it can't provide, and even then consider whether you really
need it given the risks of running something else.

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message