On Thu, 23 Mar 2000, Peter Vogel wrote:
> So wouldn't I bet better of going for ProFTP? Or does that have
> security problems too?
> [...]
If you only want to offer files for download I would strongly recommend
going for Dan Bernstein's publicfile previously mentioned.
http://cr.yp.to/publicfile
It uses no external programs, runs with no privileges, has no accounts
(even abuses you for trying to log into an anonymous FTP server :-) ). It
just serves files.
If you need file upload or separate user areas, then I would agree with
Rachel's comments about ProFTP.
And if you do want to allow file uploads, use the usual precautions
separate partition for ftp, and even a separate one for uploads,
write-only upload areas - no search or read, etc.
Gordon
--
Gordon Rowell Email: [EMAIL PROTECTED]
Gormand Pty Ltd (ACN 067 684 548) http://www.gormand.com.au
P.O. Box 239 St Pauls NSW 2031 Mobile: +61 (0418) 467 366
/* What a pile of australian legislature. */ - Alan Cox
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
