From: [EMAIL PROTECTED] To: Stephen Gran <[EMAIL PROTECTED]> Subject: Re: recommendations for FTP server Date: Fri, 20 Jun 2003 18:37:43 +0000
If security is a concern, you might want to use SecureFTP instead. It is part of the OpenSSH package. The sftp client is a part of most Linux and BSD (including MacOS X) distros and there are also sftp clients for MacIntosh http://ca.huji.ac.il/services/internet/ssh/macsftp.shtml and Windows http://www.chiark.greenend.org.uk/~sgtatham/putty/ . > Hello all, > > I am thinking about setting up an FTP server to be used by myself and a > couple of friends. The box it will be running on is basically stock > Woody, and is currently only running apache and NAT'ing for a LAN. > > I'd like the FTP server to not allow anonymous logins (which I assume > most can do), chroot users to their home directories, and have some sort > of encrypted connections (over SSL would be nice). I have thought about > just using sftp, but currently ssh connections are rerouted to another > box on the LAN, and I'd like to leave that set up as is, if possible. > > I see that proftpd is the example used in the 'securing Debian' manual, > but it doesn't appear to be able to use SSL. OTOH, ftpd-ssl doesn't > appear to do chroot'ing, at least not at a quick glance. Anybody know > of one that combines these features? I suppose there is always stunnel, > although I have never tried to use it for FTP. > > Any recommendations, experiences, thoughts? > -- > -------------------------------------------------------------------------- > | Stephen Gran | The proof of the pudding is in the | > | [EMAIL PROTECTED] | eating. -- Miguel de Cervantes | > | http://www.lobefin.net/~steve | | > -------------------------------------------------------------------------- >