Hey guys, I was just wondering if anybody had any advice on which ftp server I should use for my linode, security is my number one concern. Are there any with known security holes that I should avoid?

Cheers.

I recommend vsftpd.

_________________
/ Peter

I've had a look and vsftpd seems to be quite good, might give this one a go. Thanks very much for that Peter.

Cheers.

That's the one I run. No problems here!

I use VSFTP too and it's excellent.

_________________
-=L9NUX=-

i cant get vsftpd to accept anonymous connections. i setup the conf file right .. according to the website but it always gives me connecttion terminated wrong password.

Hi all, Im having a problem connecting to my vstpd. Im allowing all traffic right now.

Connection attempt failed with "ECONNREFUSED - Connection refused by server".

Im using the default config file, which allows annoymous users by default right now, but its not connecting.

See what the command netstat -lvnut produces. If you don't see something ending in ":21" under "Local Address," then the FTP server isn't listening for connections. If this is OK, check your firewall settings to make sure you're not blocking connections.

I recommend vsftpd if you really want to use ftp.

If security is your concern, don't use FTP at all. Use SFTP.

SFTP support is built right into your SSH server, so it's already supported. There are a variety of clients for every platform (Windows/Linux/OS X). It "just works", and provides similar functionality to FTP.

I'd have to agree with Guspaz. FTP isn't really worth it when you can use SFTP (SSH File Transfer Protocol, vastly more secure). But if you really must have FTP, vsftpd isn't a bad choice at all.

Is it possible to create a user for the primary purpose of sFTPing to a folder outside of the home directory, while using public/private keys?

I set up a user with no shell access, and a home directory of /var/www/domain.com, but I couldn't figure out where to put my public key, and so the sftp connection would never authenticate.

sshd should use ~/.ssh/ no matter what ~ is. So, in this case, it'd be /var/www/domain.com/.ssh/

You need to be careful with ownership/permissions as well - sshd is pretty picky about this. The complete path to the certificate must be readable by the user and not be writable by groups or others or belong to root.

_________________
/ Peter

Does it matter who owns the .ssh folder?

Because, I did all of those things and I believe I had permissions set correctly, but the owner of the folder was a different user.