Opinions on Preferred FTP Server for Linux [ftp server software] [vsftp]

admin / December 11th, 2010/ Posted in Operating Systems / No Comments »

Q: Hey Everyone,

Im play a RH9 machine and it shows that vsftpd is the default (actually the only one) on the machine. To make matters worse, RH decided not developed as part of xinetd, but an isolated place to install. In the past I could easily set using wuftp for local users have their own folders on the log-in (only under xinetd vsftpd docs say) and have other things rather easy to configure. Sooooo . Im going to look around and see if there is not an used for downloading, but I thought I would get the AT first.

So opinions what do you all want? Want something else or you want vsftpd to reinstall as part of xinetd? If the latter . how would I go about removing the current setup?

Thanks for your thoughts .

Joe


Ftp-o-matic.
Re:sftp breaks out of the jail? That doesn't sound right.Yeah, users can only make changes in their home directory but they can see the rest of the tree. Maybe I don't have something set correctly but it doesn't really matter since ftp over ssh works just fine.

Zalman FTP Client 2010 – Award winning FTP client
Re:Could always use scp if you're worried about security.

Another vote for Proftpd. I like how it handles virtual users. :)


Safety Critical Software Development
Re:Originally posted by: Workin'

Originally posted by: guy
are you guys giving anonymous ftp access? if not, then sftp (via ssh) would be a better solution.I allow only real users access via ssh. No anonymous ftp. And users stay in a chroot jail. SFTP lets users see the whole directory tree, which I do not want.

sftp breaks out of the jail? That doesn't sound right.


Virtual Private Server (vps) with Web Interface, for MetaTrader Forex
Re:Originally posted by: guy
are you guys giving anonymous ftp access? if not, then sftp (via ssh) would be a better solution.I allow only real users access via ssh. No anonymous ftp. And users stay in a chroot jail. SFTP lets users see the whole directory tree, which I do not want.

Setting Up A Web Server.
Re:are you guys giving anonymous ftp access? if not, then sftp (via ssh) would be a better solution.

Internet marketing software – Internet marketing softwares
Re:I'd say proftp too

also, to remove , I'd use this:

rpm -qa | grep | xargs rpm -e


Best Computer Monitoring Software
Re:Ahhh…. bless YOU!

Joe


Wholesale Software
Re:same thing … more opinions for ya to consider (http://www.bsdforums.org/forums/showthread.php?s=&threadid=4311&highlight=best+ftp+server+to+run)

Software Easy Money | Very High Conversion
Re:Well… so far it's tied at 3 each for Pro and Pure.

Anyone else have opinions?

Joe


MedSites – Software Business Solutions
Re:I use proftpd. Works good. Fairly easy to set up.

Re:I prefer ProFTPd.

I've never used Pureftpd though, so I won't say one is better than the other, I mostly use ProFTPd cause Im used to it, it has all the features I need, and it just generally works good :)

Oh and the documentation is very good, now THAT's something I really like ;)


Re:good info to know…I'll have to look into that further now :)

Re:I was under the impression that since MaxInstances was not valid when using [x]inetd that this could cause a denial of service. I am not overly familiar with [x]inetd, thus I stand corrected if I misinterpeted that info.

I believe xinetd can do the same thing, even with services that don't have a directive like that. And I believe it can do "Max instances in 5 seconds" or something like that to stop connection hammering, but still allow connections.


Re:"The MaxInstances directive configures the maximum number of child processes that
may be spawned by a parent proftpd process in standalone mode. The directive has
no effect when used on a server running in inetd mode.

Because each child proftpd process represents a single client connection, this
directive also controls the maximum number of simultaneous connections allowed.
Additional connections beyond the configured limit are syslog'd and silently
disconnected. The MaxInstances directive can be used to prevent undesireable
denial-of-service attacks (repeatedly connecting to the ftp port, causing
proftpd to fork-bomb). By default, no limit is placed on the number of child
processes that may run at one time."

I was under the impression that since MaxInstances was not valid when using [x]inetd that this could cause a denial of service. I am not overly familiar with [x]inetd, thus I stand corrected if I misinterpeted that info.


Re:Though I prefer standalone as it is not as vulnerable to denial of service attacks.

How so? xinetd does connection rate limiting per service and things like that.


Re:Hmmm…. it looks like I'm seeing a trend here!

Joe


Re:Originally posted by: Vortex
Me 3 for pure-ftpd

i have also used Pure-FTPd (http://www.pureftpd.org/) , very easy to setup


Re:I've used pro and pure and both work fine but the documentation for pure was much more thorough for what I wanted to do. :)

Re:I prefer proftpd and pureftpd. I use proftpd on all of my *nix boxes and am pleased. Pretty straight forward to setup and can run as standalone or xinet. Though I prefer standalone as it is not as vulnerable to denial of service attacks. There are quite a few GUI tools available to aid in user management, but I can't comment on those since I use CLI most of the time.

Related posts


Tags: ,

Leave a Reply

Name required

Mail (will not be published) required

Website