Re: qmail publicfile : need advice

I'd second that comment about ncftpd - especially since it's free for 
education. That said I believe the FTP protocol should be put down as 
soon as possible.

There are some nice GUIs for scp/sftp - maybe have a look for some of 
those? WebDAV is gaining acceptance too, and we're finding it fits 
nicely as a solution to some remote access problems. Certainly for 
updating web sites it would be spot on.

  - samj

David Phillips wrote:
> PayalR writes:
> 
>>I was thinking of proftpd or wu-ftpd.
> 
> 
> If you are considering wu-ftpd, then you might as well give the whole world
> root.  wu-ftpd is about as secure as BIND, Sendmail or IIS.  proftpd has
> also had it's share of security holes:
> 
> http://cr.yp.to/publicfile.html
> 
> ncFTPd is a good FTP server to look at.  It is free for educational use.  It
> is secure, performs well, is very configurable and has a lot of nice
> features:
> 
> http://www.ncftp.com/ncftpd/
> 
> There are probably other decent FTP servers to look at, but by all means
> avoid wu-ftpd.  Really, you would be doing your users a favor if you taught
> them about SSH and sftp.  A nice howto on using PuTTY's sftp would be easy.
> And isn't the purpose of this to teach?  So why not teach students about
> security and secure file transfer from the beginning, before they get sucked
> into thinking FTP is the only thing available?
> 
> --
> David Phillips <[email protected]>
> http://david.acz.org/
> 
>