From owner-freebsd-security  Tue Nov 20  7:19:34 2001
Delivered-To: freebsd-security@freebsd.org
Received: from clink.schulte.org (clink.schulte.org [209.134.156.193])
	by hub.freebsd.org (Postfix) with ESMTP id C1CA737B416
	for <security@FreeBSD.ORG>; Tue, 20 Nov 2001 07:19:32 -0800 (PST)
Received: from schulte-laptop.schulte.org (nb-65.netbriefings.com [209.134.134.65])
	by clink.schulte.org (Postfix) with ESMTP
	id 1A44D2440B; Tue, 20 Nov 2001 09:19:28 -0600 (CST)
Message-Id: <5.1.0.14.0.20011120091400.01b83e48@pop.schulte.org>
X-Sender: schulte@pop.schulte.org
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Tue, 20 Nov 2001 09:19:24 -0600
To: RoBSD <robsd@softhome.net>
From: Christopher Schulte <christopher@schulte.org>
Subject: Re[2]: Fwd: Vendors For WU-FTPD Please Read
Cc: security@FreeBSD.ORG
In-Reply-To: <722713532.20011120150917@softhome.net>
References: <Pine.LNX.4.10.10111200941480.988-100000@ruby.ccmr.cornell.edu>
 <Pine.LNX.4.10.10111200941480.988-100000@ruby.ccmr.cornell.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Let's not forget ncftpd. http://www.ncftpd.com/  I've got it configured to:

1) not allow download of '/incoming/' files from ftp users
2) set local filesystem permissions to prevent other real users from 
reading these files

There's not been one root exploit since I began using it in 1997.

At 03:09 PM 11/20/2001 +0000, you wrote:
>www.pureftpd.org
>MC> www.proftpd.org
>
> >> What would be a good alternative to WU-FTPD that allows safe one way 
> uploads ?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message