Security Basics mailing list archives

RE: Secure FTP Server Search


From: Will Munkara-Kerr <WillM () cs nsw gov au>
Date: Thu, 14 Nov 2002 11:13:15 +1100

Hello list,

I am looking for a secure FTP server which has less
vulnerabilities compared to IIS. Besides
functionality, it is important to be tightly secure &
not to have some vulnerabilities related with FTP
commands such as FTP PORT / SITE / NLIST.

Any recommedations & comments are wellcome.

Running on windows? Spending money?

Windows - money:
WS_FTP Pro Server
WFTPD - Windows FTP Server

Windows - no money:
Cerebus
Cesar
WAR FTP Daemon

The pricey ones are significanly better, (and, yes, obviously, significantly
more expensive)

If you are running *n*x operating system, I would recommend using scp over
ssh. Same functionality as ftp, but encypted. There are windows clients for
this (WinSCP), I don't know about servers...
Personally recommend this as your number 1 option. 

Most of the UNIX ftp clients are quite good too.. 

take your pick...
good, fast, cheap...

./the_ids_guy

.will 
"This message is intended for the addressee named and may contain
confidential information. If you are not the intended recipient, please
destroy it and notify the sender. Views expressed in this message are those
of the individual sender, and are not necessarily the views of the Central
Sydney Area Health Service."


Current thread: