Re: Securing the data channel

On Friday 25 November 2005 12:13 am, [email protected] wrote:
> This seems to suggest that FTP-SSL *does* support encrypted data
> channels, right? (Since it's connecting to another port for the
> encrypted data channel.) Also,

the protocol does, pure-ftpd does not.

> ftp://ftp.rfc-editor.org/in-notes/rfc4217.txt
>
> suggests the same.
>
> So is it possible to get a secure data channel using pure-ftpd?

not currently, no.  IMHO, if you want security, use scp/sftp.

> If 
> not, can anyone suggest another easy-to-use (but featureful) FTP
> server that supports encrypted data? (I guess if there's nothing else
> out there, I'll resort to SFTP, which sucks since it has nothing in
> terms of features.)

i'm not sure if they support what you need, but vsftpd [1] and proftpd [2] are 
excellent alternatives to pure-ftpd.  I believe vsftpd is more lightweight 
and simple, like pure-ftpd, whereas proftpd is the sendmail of ftp servers 
(although, proftpd has had quite a few less security problems, it has had 
some, pure- and vs- have not)

-Jeremy

-- 
Jeremy Kitchen ++ [email protected]

In the beginning was The Word and The Word was Content-type: text/plain
  -- The Word of Bob.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDizlTyBTJv0gb9+IRAmtvAJ9xypl98WEHIpiqv4NVndrtgVKbqACgt0pv
5T7VgmPz21MGpewU0TSk7u8=
=Pylx
-----END PGP SIGNATURE-----