[ILUG] wu-ftpd

Dave Wilson dave.wilson at heanet.ie
Fri Nov 3 15:10:05 GMT 2000


> > > With all the holes in wu-ftpd, why is any one still using it?
[snip]
> ProFTPD[0] is very nice, and has had very few security on problems on linux

I seem to oscillate between wuftpd and ProFTPD in a kind of binge/purge cycle.
I still haven't found an FTP daemon for Linux that I'd consider **secure**.
I switched to ProFTPD last year after getting pissed off with multiple
successive vulnerabilities in WU, and then ProFTPD got hit by two or three in
a row, one of them while I was out of the country.

At the moment I'm still in a ProFTPD phase, mainly because it is a *lot*
easier to set up (i.e. I can get chrooted users working) and the speed at
which problems are fixed when they're discovered is satisfactory. Where
feasible, though, I just filter that port and use scp instead.

Dave

-- 
 dave.wilson at heanet.ie  ------- DW238-RIPE ------- GPG key: davew+pgp at heanet.ie
                 "The beauty of the Internet and the IETF lies in a simple idea
 p:353-1-6623412  that the only standards under consideration are those already
 f:353-1-6629278  in use on the Net. Ready, fire, aim!"   -- Robert X. Cringely




More information about the ILUG mailing list