Is bftpd actualy secure? Any advice...

hunterthomson · 2013-03-30 04:48:59

So, I have been having problems with vsftpd (Kernel related not easy to fix by me)

I looked in the repo's and started playing with bftpd. It says it is secure but it runs as root? It is the only ftp daemon that is in the official repos "extra". Both vsftpd and proftpd are in "community".

Dose anyone have any experience with bftpd?

bftpd may not cut it anyway. I need to be able to set bandwidth limits.

hunterthomson · 2013-03-30 05:28:42

Well, after looking some more it seems my options are very limited.
I don't think bftpd, proftpd, pure-ftpd, or wzdftpd meet my security standards. Maybe oftpd...

I am already running DarkHTTPD in a jail... it serves files.

Like I said darkhttpd is already running, so any ftp server I choose would only be making the server's attack surface larger. Another way to put it, the most secure ftp server is one that is not installed.

Last edited by hunterthomson (2013-03-30 05:30:51)

Arch Linux

#1 2013-03-30 04:48:59

Is bftpd actualy secure? Any advice...

#2 2013-03-30 05:28:42

Re: Is bftpd actualy secure? Any advice...

Board footer