RE: Secure FTP server for Windows

["Mike Sweeney" <mikesweeney () packetattack com>]

Derek-

I second using SCP/SFTP and SSH for the server. There are several versions
for Windows. You can set up custom identities and configure it to use
private/public keys and with or without a password. Don't bother with SSHv1
and just use SSHv2. RSA is plenty strong but you can change the encryption
if you so desire.

MikeS

www.packetattack.com


-----Original Message-----
From: Dana Epp [mailto:dana () vulscan com] 
Sent: Friday, December 03, 2004 12:32 PM
To: Derek Fountain
Cc: security-basics () lists securityfocus com
Subject: Re: Secure FTP server for Windows

Consider using SCP. You would need to install the SSH server through cygwin,
but it works well.

Derek Fountain wrote:
> Can anyone recommend an FTP server for Windows which has been written with

> security in mind? I only really know such things about Linux (where vsftpd
is 
> the obvious choice) but I've been asked to recommend a Windows2000 or 
> WindowsXP product.


-- 
Regards,
Dana Epp
[Blog: http://silverstr.ufies.org/blog/]