Re: [SLE] What happened to ProFTPD in 8.0 ?
I always thought it was wuftpd that was supposed to be the security
nightmare and proftp that was designed with security in mind.
Sean Akers.
-----
Sean Akers: sean@akers-online.co.uk
Christopher Mahmood
The recent thread about setting up an FTP server in 8.0 reminded me that I wanted to ask if anyone knew why ProFTPD had been dropped from the 8.0 distro.
Because it's been a security nightmare. The 2.4 wuftpd included (2.6 is also there) was audited by our security team years ago, vsftpd is new daemon that very small and designed with security in mind, and pureftpd is the only one with large file support. We used the 2.4 version of wuftpd for years and I recently switched ftp.suse.com to vsftpd...except for the (x)inetd requirement, I've been really happy with it. --
* Sean Akers (sean@akers-online.co.uk) [020516 14:38]:
I always thought it was wuftpd that was supposed to be the security nightmare and proftp that was designed with security in mind.
Neither is great but we audited wuftpd 2.4 and have at least some faith in it (we ran it for years). -- -ckm
participants (3)
-
Christopher Mahmood
-
Fábio Rabelo
-
Sean Akers