Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Lake
Hi all,

Thanks for the suggestions. I have installed vsftpd and will see how it 
goes. The config file is easy to follow which is nice.
I'll test it out at home. Thanks all.


Mike




UTS CRICOS Provider Code:  00099F

DISCLAIMER

This email message and any accompanying attachments may contain
confidential information.  If you are not the intended recipient, do not
read, use, disseminate, distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message. Any views expressed in this message
are those of the individual sender, except where the sender expressly,
and with authority, states them to be the views the University of
Technology Sydney. Before opening any attachments, please check them for
viruses and defects.



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Fox
Quoting David Fitch <[EMAIL PROTECTED]>:

> Hi Michael,
> 
> I'm another vote for proftpd.  Been using it for yonks,
> permanently connected to the the net, it gets many probes/
> connections per day (none legitimate) and has stood up
> to it all so far (with the apt-get updates of course).
> (although the vsftp (or whatever it was) sounds interesting too)

David,

Sounds exactly like my usage of proftpd for the past 3 years... its just sat 
on boxes with permanent links and the box has never been exploited.

I've since introduced someone at work here to Debian, and he has been quite 
pleased with it. Infact rather impressed at times *winks*

Cheers
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread David Fitch
Hi Michael,

I'm another vote for proftpd.  Been using it for yonks,
permanently connected to the the net, it gets many probes/
connections per day (none legitimate) and has stood up
to it all so far (with the apt-get updates of course).
(although the vsftp (or whatever it was) sounds interesting too)

Dave.
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Fox
Quoting Michael Lake <[EMAIL PROTECTED]>:

> Thanks Michael for the proftpd suggestion. The description of it from
> apt-cache show seemed like it was very powerful and provided features
> I
> wont be using so I assumed the config files might be more complex too
> which may not be the case. So its in the basket to consider now.

Someone mentioned it had security issues previously, and just like any product 
that is released they all have a past. However the security issue I remember it 
having, was found and fixed within days.

As other have also suggested we have a wide choice of other suitable ftpd's, 
personally I've found proftpd to be simple, and yet if you must vi the 
proftpd.conf, its not that difficult to understand.

However I believe recently, debconf can be used to manage/maintain the 
proftpd.conf and you get a prompt at install time if you want to do this.

I think I might take a look at someones suggestion just recently of vsftpd was 
it. Sounds interesting.

Cheers


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Lake
Michael Fox wrote:
> > > > I need to add an ftpd to my Debian laptop and wwondered what
> > > > ppl have used and can recommend and what not maybe to use.
> > > apt-get install proftpd
> >
> > You didn't really read the email, did you?
> 
> Yes, somewhat. But probably not entirely. However... since when wasn't
> proftpd easy. All you do is install it, make some changes and leave it.
 
> > >But also I wont be using virtual hosts or anything fancy
> > (hence dont need
> > proftp). So simpliclity is a plus
> 
> Just because proftpd can do this fancy stuff, doesn't mean its not easy. I
> don't use those functions and never have. However I use it, because out of
> the box its ready to roll, and not to mention very secure. End case!

Thanks Michael for the proftpd suggestion. The description of it from
apt-cache show seemed like it was very powerful and provided features I
wont be using so I assumed the config files might be more complex too
which may not be the case. So its in the basket to consider now.

Mike
-- 
Mike Lake
Uni of Technol., Sydney


UTS CRICOS Provider Code:  00099F

DISCLAIMER

This email message and any accompanying attachments may contain
confidential information.  If you are not the intended recipient, do not
read, use, disseminate, distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message. Any views expressed in this message
are those of the individual sender, except where the sender expressly,
and with authority, states them to be the views the University of
Technology Sydney. Before opening any attachments, please check them for
viruses and defects.



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re[2]: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread evilbunny
Hello Jeff,

scp? mind you I run proftpd for the poor ppl without good set of
security tools and don't have virtuals... it locks things down
tight...

-- 
Best regards,
 evilbunnymailto:[EMAIL PROTECTED]

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom

Thursday, December 5, 2002, 12:53:21 AM, you wrote:

JW> 

>> Use is mainly for home machine<-->machine but will be using at at uni
>> where it will be effectively directly connected so security is a concern.
>> (my IRIX box here shows several attemps / week) But also I wont be using
>> virtual hosts or anything fancy (hence dont need proftp). So simpliclity
>> is a plus.
>> Users will be mainly me at uni.
>> Anyone used oftpd, vsftpd or twoftpd.

JW> I'd recommend vsftpd, it's very secure and fast on Linux. Great stuff.

JW> - Jeff

JW> -- 
JW>"2.4.1ac17 is full of innovations and should be used with caution." -
JW>  Linux Weekly News  



smime.p7s
Description: S/MIME Cryptographic Signature


Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Jeff Waugh


> Use is mainly for home machine<-->machine but will be using at at uni
> where it will be effectively directly connected so security is a concern.
> (my IRIX box here shows several attemps / week) But also I wont be using
> virtual hosts or anything fancy (hence dont need proftp). So simpliclity
> is a plus.
> Users will be mainly me at uni.
> Anyone used oftpd, vsftpd or twoftpd.

I'd recommend vsftpd, it's very secure and fast on Linux. Great stuff.

- Jeff

-- 
   "2.4.1ac17 is full of innovations and should be used with caution." -
 Linux Weekly News  
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Rob B
- Original Message -
From: "Michael Fox" <[EMAIL PROTECTED]>
To: "'Rob B'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, December 04, 2002 9:49 PM
Subject: RE: [SLUG] What ftpd - oh the choices ?

> > > > I need to add an ftpd to my Debian laptop and wwondered what
> > > > ppl have used and can recommend and what not maybe to use.
> > >
> > > apt-get install proftpd
> >
> > >But also I wont be using virtual hosts or anything fancy
> > (hence dont need
> > proftp). So simpliclity is a plus
>
> Just because proftpd can do this fancy stuff, doesn't mean its not easy. I
> don't use those functions and never have. However I use it, because out of
> the box its ready to roll, and not to mention very secure. End case!

I'd have to disagree on both points there - it might be ready to roll, but
it has been the victim of some very serious security flaws in the past.  I
think that, when compared to lukemftpd or vsftpd, proftpd is overkill.

Rob

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



RE: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Fox
> > >
> > > Hi all,
> > >
> > > I need to add an ftpd to my Debian laptop and wwondered what
> > > ppl have used and can recommend and what not maybe to use.
> >
> > apt-get install proftpd
>
> You didn't really read the email, did you?

Yes, somewhat. But probably not entirely. However... since when wasn't
proftpd easy. All you do is install it, make some changes and leave it.

>
> >But also I wont be using virtual hosts or anything fancy
> (hence dont need
> proftp). So simpliclity is a plus

Just because proftpd can do this fancy stuff, doesn't mean its not easy. I
don't use those functions and never have. However I use it, because out of
the box its ready to roll, and not to mention very secure. End case!

>
> Rob
>

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Rob B
- Original Message -
From: "Michael Fox" <[EMAIL PROTECTED]>
To: "'Michael Lake'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, December 04, 2002 9:27 PM
Subject: RE: [SLUG] What ftpd - oh the choices ?


> >
> > Hi all,
> >
> > I need to add an ftpd to my Debian laptop and wwondered what
> > ppl have used and can recommend and what not maybe to use.
>
> apt-get install proftpd

You didn't really read the email, did you?

>But also I wont be using virtual hosts or anything fancy (hence dont need
proftp). So simpliclity is a plus

Rob

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



RE: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Michael Fox
> 
> Hi all,
> 
> I need to add an ftpd to my Debian laptop and wwondered what 
> ppl have used and can recommend and what not maybe to use.

apt-get install proftpd
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] What ftpd - oh the choices ?

2002-12-04 Thread Rob B
- Original Message -
From: "Michael Lake" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, December 04, 2002 7:21 AM
Subject: [SLUG] What ftpd - oh the choices ?


> Hi all,
>
> I need to add an ftpd to my Debian laptop and wwondered what ppl have used
and can recommend and what not maybe to use.
> Previously I just had put the install scripts put one on for me but now I
can see I have quite a few choices.
> Use is mainly for home machine<-->machine but will be using at at uni
where it will be effectively directly connected
> so security is a concern. (my IRIX box here shows several attemps / week)
> But also I wont be using virtual hosts or anything fancy (hence dont need
proftp). So simpliclity is a plus.
> Users will be mainly me at uni.
> Anyone used oftpd, vsftpd or twoftpd.

On my Debian box I use vsftpd, couldn't be happier with it.  Real
lightweight, good throughput, and no known buffer overflows or anything :)
Can't be too bad - ftp.redhat.com runs on it, as does ftp.openbsd.org

On my FreeBSD boxes I use lukemftpd, so far, there isn't much of a
difference, lukemftpd can do a couple things that vsftpd can't - like chroot
and kerberos/S-key  authentication

cheers,
Rob


--   "Teaching should be such that what is offered is perceived
as a valuable gift and not as a hard duty." - Albert Einstein
This is quote 76 of 1254.


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] What ftpd - oh the choices ?

2002-12-03 Thread Michael Lake
Hi all,

I need to add an ftpd to my Debian laptop and wwondered what ppl have used and can 
recommend and what not maybe to use.
Previously I just had put the install scripts put one on for me but now I can see I 
have quite a few choices.
Use is mainly for home machine<-->machine but will be using at at uni where it will be 
effectively directly connected
so security is a concern. (my IRIX box here shows several attemps / week) 
But also I wont be using virtual hosts or anything fancy (hence dont need proftp). So 
simpliclity is a plus.
Users will be mainly me at uni.
Anyone used oftpd, vsftpd or twoftpd.

Package: ftpd
Provides: ftp-server
Description: FTP server
This is the netkit ftp server.  It is recommended for you to use one of its
alternatives, such as wu-ftpd or proftpd.
Task: unix-server

Package: ftpd-ssl
Maintainer: Christoph Martin <[EMAIL PROTECTED]>
Provides: ftp-server
Description: FTP server with SSL encryption support.
This is the netkit ftp server with encryption support
ftpd-ssl replaces normal ftpd using SSL authentication and  encryption.
It interoperates with normal ftp.
It checks if the other side is also talking SSL, if not it falls back
to normal ftp protocol.
Advantages over normal ftp(d): Your passwords and the data you send
will not go in cleartext over the line. Nobody can get it with
tcpdump or similar tools.

Package: lukemftpd
Maintainer: Takuo KITAME <[EMAIL PROTECTED]>
Provides: ftp-server, ftpd
Description: The enhanced ftp daemon from NetBSD.
`lukemftpd' is what many users affectionately call the enhanced ftp
server in NetBSD (http://www.netbsd.org).  The `lukem' comes from
the account name of the NetBSD developer who wrote most of the
enhancements: Luke Mewburn <[EMAIL PROTECTED]>.

Package: muddleftpd
Maintainer: Joerg Jaspert <[EMAIL PROTECTED]>
Provides: ftp-server
Description: A flexible and efficient FTP daemon
MuddleFTPd has been designed from the ground up to be efficient,
configurable and to be tolerant of being run in root or non-root mode.
This server enables users to set up a variety of configurations, from
a traditional FTP server using the password file for everything, to
using the password file for nothing running entirely as a single
user.

Package: oftpd
Maintainer: Matthew Danish <[EMAIL PROTECTED]>
Provides: ftp-server
Description: A secure anonymous FTP server
Designed from the ground up to be as secure as an anonymous FTP server
can be.  It runs as non-root and uses chroot() to hide the rest of the
system from the ftp daemon.  It is designed to work efficiently with
threads.

Package: pyftpd
Maintainer: Radovan Garabik <[EMAIL PROTECTED]>
Description: ftp daemon with advanced features
multithreaded ftp daemon written in python, featuring advanced
permission scheme, upload/download speed throttling,
GUI configuration, internal database of users and more.
Does not need to run as root.

Package: twoftpd
Maintainer: Gerrit Pape <[EMAIL PROTECTED]>
Description: a simple secure efficient FTP server
This is twoftpd, a new FTP server that strives to be secure, simple, and
efficient.  None of the commands can cause execution of other programs,
and the normal model of execution does a chroot to the logged in user's
directory immediately after authentication.
The name "twoftpd" comes from the fact that there were two parts to the
server -- an authenticating front end, which contains no file or data
transfer code, and a back end, which contains all the data transfer
code.

Package: vsftpd
Maintainer: Daniel Jacobowitz <[EMAIL PROTECTED]>
Provides: ftp-server
Description: The Very Secure FTP Daemon
A lightweight, efficient FTP server written from the ground up with
security in mind.
vsftpd supports both anonymous and non-anonymous FTP, PAM authentication,
bandwidth limiting, and the Linux sendfile() facility.

Package: proftpd
Maintainer: Ivo Timmermans <[EMAIL PROTECTED]>
Provides: ftp-server
Description: Versatile, virtual-hosting FTP daemon
A powerful replacement for wu-ftpd, this File Transfer Protocol
daemon supports hidden directories, virtual hosts, and per-directory
".ftpaccess" files.  It uses a single main configuration file, with a
syntax similar to Apache.
.

Mike




UTS CRICOS Provider Code:  00099F

DISCLAIMER

This email message and any accompanying attachments may contain
confidential information.  If you are not the intended recipient, do not
read, use, disseminate, distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message. Any views expressed in this message
are those of the individual sender, except where the sender expressly,
and with authority, states them to be the views the University of
Technology Sydney. Before opening any attachments, please check them for
viruses and defects.



-- 
SLUG - Sydney L