> > Of the ftp servers , which ones are the most secure?
> >
> I've installed NCFTPd here on my lan at home, even though I"m behind a
> firewall for two reasons -- one it's easy to configure and two it's pretty
Comparing ftp servers is like comparing hard drive manufacturers or tire
manufacturers. Today Bridgestone may be the best but tomorrow GoodYear may
be. It's like any two pieces of software that perform the same function.
They may differ in features, performance, security, etc, but any one of
them could be afflicted with security problems at any time.
Now, Fred's TwoBitHackFTPd may be a different story, but all the popular
ones are maintained about equally. You have to base your decision on
features, attentiveness to critical issues like security, how actively
developed and audited it may or may not be, etc.
Another critical point is the mentality that was used while developing it.
Chris Evans' vsftpd, for example, was developed from the ground-up with
security as a primary function. While it's still somewhat development, no
shortcuts were taking during the development process -- every security
feature that could be employed during development was used.
More information on it can be found on linuxsecurity.com at:
http://www.linuxsecurity.com/articles/security_sources_article-2390.html
Our new EnGarde Secure Linux was developed using similar design
motives and includes Chris' ftp daemon. If you're interested in further
information, check us out at:
http://www.engardelinux.org
Dave
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
