Re: qmail publicfile : need advice

"David Phillips" <[email protected]> Mon, 16 Sep 2002 16:16:47 -0500
Newsgroups gmane.comp.djb.publicfile
Message-ID <002801c25dc6$5dab9970$0201a8c0@brinstar>
PayalR writes:
> I was thinking of proftpd or wu-ftpd.

If you are considering wu-ftpd, then you might as well give the whole world
root.  wu-ftpd is about as secure as BIND, Sendmail or IIS.  proftpd has
also had it's share of security holes:

http://cr.yp.to/publicfile.html

ncFTPd is a good FTP server to look at.  It is free for educational use.  It
is secure, performs well, is very configurable and has a lot of nice
features:

http://www.ncftp.com/ncftpd/

There are probably other decent FTP servers to look at, but by all means
avoid wu-ftpd.  Really, you would be doing your users a favor if you taught
them about SSH and sftp.  A nice howto on using PuTTY's sftp would be easy.
And isn't the purpose of this to teach?  So why not teach students about
security and secure file transfer from the beginning, before they get sucked
into thinking FTP is the only thing available?

--
David Phillips <[email protected]>
http://david.acz.org/