Security Basics mailing list archives

Re: FTP server options


From: Esben Stien <executiv () online no>
Date: 13 Sep 2003 12:15:30 +0200


I've used pureftpd for a very long time and was very happy with it until it changed it's license to bsd. I've written 
to the author and asked if he held the entire copyright to the software, which would mean he had the right to change 
the license from the original gpl one, but have gotten no reply. I'm now switching to proftpd on all my systems.

"Raymer, Dan" <DRaymer () webmd net> writes:

I would like to say THANKS to all the replies.  I am somewhat familiar with
ProFTP, never have worked with PureFTP before, and glFTP is a new one all
together for me.  Any opinions on ncFTP?  I am going to try all 3 of the
above suggestions and see which one works best/fits our needs.  Thanks
again!

Daniel Ryamer
WebMD
Unix System Engineer

-----Original Message-----
From: Raymer, Dan [mailto:DRaymer () webmd net]
Sent: Tuesday, September 09, 2003 2:55 PM
To: security-basics () securityfocus com
Subject: Req: FTP server options


To start off, let me say that I understand that SCP and SFTP is the way to
go.  Knowing that, I am looking for some FTP server options running under
*nix that do not pose some of the vulnerabilities that wu-ftp has shown over
the past years.  I have had no issues with ncftpd or vsftpd, but I am
looking for suggestions.  The server will need to be relatively exploit
free, run under Solaris/AIX/Linux/HP-UX, and cheaper is better (and free is
awesome).  I am relatively new to the Bugtraq groups and I am still
researching the archives, but I thought this group could point in some good
directions.  Given the FTP servers out there, which is the most recommended
and why?  Thanks in advance for your suggestions.

Daniel Raymer
WebMD
Unix System Engineer


---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------




-- 
(-_-)


---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------


Current thread: