Uh - as in the one that just got bugtraq'ed because of a remote root
compromise?

(search for 'OpenBSD remote root')

Without taking a look I'm not even sure that the Linux port would be
vulnerable to the exploit, but I'd look at it fairly carefully if planning
to implement this...

I'm with Truman - use publicfile.

Cheers,

--
Ben Nagy
Marconi Services
Network Integration Specialist
Mb: +61 414 411 520  PGP Key ID: 0x1A86E304

> -----Original Message-----
> From: Peter 'Luna' Runestig [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 4 January 2001 7:24 
> To: Magic Phibo
> Cc: [EMAIL PROTECTED]
> Subject: Re: Secure FTP Server
> 
> 
> Magic Phibo wrote:
> > 
> > Hi folks
> > 
> > What ftp server app. would you recommend if the main concern
> > is security. Platform will be redhat linux, passive AND active
> > mode and anonymous access should be supported.
> 
> There is a Linux port of the OpenBSD ftpd at:
> ftp://ftp.runestig.com/pub/ftpd-tls/
> (we just swiched ISP, so in case there's some old DNS records 
> out there,
> the address is 195.67.47.226)
> 
> The OpenBSD origin (hopefully) indicates some security 
> against exploits.
> As the name reveals, there's SSL/TLS support (together with OpenSSL)
> accoring to the IETF draft:
> draft-murray-auth-ftp-ssl-06.txt
> A un*x SSL/TLS client is at:
> ftp://ftp.runestig.com/pub/ftp-tls/
> 
> -- 
> Peter 'Luna' Runestig (fd. Altberg), Sweden <[EMAIL PROTECTED]>
> PGP Key ID: 0xD07BBE13
> Fingerprint: 7B5C 1F48 2997 C061 DE4B  42EA CB99 A35C D07B BE13
> AOL Instant Messenger Screenname: PRunestig
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to