Re: FTPd recommendation?

Jerry McAllister wrote:

Using what comes with the base system.
Having no problem.

Same here. If functionality is in the base, my philosophy is that replacing it violates the KISS principle unless the replacement offers some additional functionality that justifies the change. Security problems detected in the base are usually fixed very, very quickly.

If truly worried about the security of any ftpd (base or not), jail it and (if you can) firewall the access to limit usage to specific clients. Probably better, use SCP or SFTP instead of plain old FTP. Of course, you can't block or secure logins if you're aiming at anonymous access from the big bad Internet, but jailing the service might be sufficient then.

You might get better answers if you posted details about intended use and any atypical functionality required/desired. There are nifty ftpd replacements available that serve particularly well for some environments.


--
Greg Barniskis, Computer Systems Integrator
South Central Library System (SCLS)
Library Interchange Network (LINK)
<gregb at scls.lib.wi.us>, (608) 266-6348
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: FTPd recommendation?
    ... If functionality is in the base, my philosophy is that replacing it violates the KISS principle unless the replacement offers some additional functionality that justifies the change. ... Greg Barniskis, Computer Systems Integrator ...
    (freebsd-questions)
  • Re: Help me about this question.
    ... fancy. ... replacing because the cost of new assemblies is so low, ... With improved functionality, ... So the engineers can be freed to do other work. ...
    (alt.lang.asm)
  • [PATCH]:x86_64: Change assembly to use regular cpuid_count macro
    ... Minor cleanup patch: ... Replacing the asm statement with cpuid_count macro(which already ... provides the same functionality). ...
    (Linux-Kernel)
  • Re: Replace XLA with XLL function
    ... > You have since replaced the functionality in Name.xla with equal ... but replacing it doesn't work and you get ... The MyUdf function from the XLL seems to be hidden by ... fragements (in the workbook) of the deleted XLA equivalent. ...
    (microsoft.public.excel.programming)
  • Re: credentials prompt accessing list anonymously
    ... Even if you have given then Add functionality, they will still need to sign in to get it. ... So unless you have amended anonymous access so that anonymous people have Contributor rights, these people you have given add rights will still need to specify their name and password before being allowed to add anything. ... The workaround - can make it work like I want for a short time by disableing Anonymous access, restarting IIS and then enableing anonymous access without restarting IIS, but once the process restarts on its own, I'm back to square one. ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)