apparently, a lot of security flaws have been discovered in proftpd, and
some people say there could be a lot other ones (like in wu-ftpd).
What about repacing proftpd by pureftpd in the next Mandrake release, as
the defaukt ftp server ? It is easy to install and has a reputation to
be very secure.