[SUMMARY] Secure FTP server recommendations

From: Clive McAdam <CMcAdam_at_liaison.com>
Date: Tue Dec 14 2004 - 11:00:49 EST
After some investigating I decided to use mod_tls with ProFTPd.
It turned out to be a simple solution for ftps as it meant not having to
change any of the existing chrooted/anonymous accounts currently set up in
ProFTPd.

I recompiled ProFTPd with the following line:-

./configure --with-modules=mod_tls \
    --with includes=/usr/local/openssl/include \
    --with-libraries=/usr/local/openssl


The following link proved useful:-

http://www.castaglia.org/proftpd/modules/mod_tls.html


For those of you confused between the differences between SFTP and FTPS,
this link provides a clear explanation:-

http://www.enterprisedt.com/products/edtftpjssl/faq-answers.html


On the client side, I did testing using FileZilla (Windows)
http://filezilla.sourceforge.net/   and C-Kermit (Solaris and Linux)
http://www.columbia.edu/kermit/ck80.html

The Kermit script I used to login and do a listing looks like this:-

---snip---
#!/usr/bin/kermit +
set auth ssl verify no
ftp open <FTPs server> /user:<username> /password:<password>
if fail exit 1 Connection failed
if not \v(ftp_loggedin) exit 1 Login failed
ftp dir
if fail exit 1 ftp dir: \v(ftp_message)
ftp bye
exit
---end snip---


A good resource for describing the difference between explicit and implicit
SSL can be found here:-
http://help.globalscape.com/help/secureserver2/Explicit_versus_implicit_SS.h
tm


Thanks also for all the suggestions, viz. vandyke.com , Very Secure FTPd
http://vsftpd.beasts.org/  ,  wu-ftpd.org  , ncftpd.com  ,  pureftpd.com 

Sorry for the late summary, I hope all the info provided above helps someone
else.

 -Clive
 
 



 
 

-----Original Message-----
To: Sunmanagers (E-mail)
Subject: Secure FTP server recommendations

Any recommendations for a secure FTP server product for Solaris ?
 
I'm not too interested in mod_tls with proFTPd.
I'm also not interested in sftp either.
 
I need a true FTPs server (commercial or otherwise)
 
Does anyone have any experience/suggestions related to this ?
 
Thanks.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Tue Dec 14 11:01:43 2004

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:40 EST