Subject: wuftpd / VR / Bero FTPd for security and functionality purposes?

From: "jmansukh" <[email-masked]>
Date: Wed, 26 May 1999 18:53:31 -0700

Hi,

I'm currently running wu-ftpd 2.4.2 beta 18 and it serves my main goal of
virtual root for each users, and planning to upgrade the server.  Seems like
here are quite a few variations of wu-ftpd out there lately.  Would someone
please suggest a quick comparison of the basic wu-ftpd, VR version, and
BeroFTPd especially in security and other handy functionality.  Does any of
them support SSL?

Thanks.

Sincerely,

Jeff
[email-masked]

---

From: Gregory A Lundberg <[email-masked]>
Date: Wed, 26 May 1999 22:51:01 -0400 (EDT)

On Wed, 26 May 1999, jmansukh wrote:

> I'm currently running wu-ftpd 2.4.2 beta 18 and it serves my main goal
> of virtual root for each users, and planning to upgrade the server.  
> Seems like here are quite a few variations of wu-ftpd out there
> lately.  Would someone please suggest a quick comparison of the basic
> wu-ftpd, VR version, and BeroFTPd especially in security and other
> handy functionality.

The current version of WU-FTPD is 2.5.0 and includes all VR features.

A future version of the daemon will include many of the BeroFTPD features.
Some of the BeroFTPD features are for up-and-coming FTP protocol changes
and won't appear until they actually become RFCs and clients begin to
support them.

For maximum security you should be running 2.5.0 or the current version of
BeroFTPD.  Which you chose should depend up on virtual hosting.  If you do
a lot of vhosts, use BeroFTPD.  Otherwise use 2.5.0.

BeroFTPD supports security features (FTP-SEC) such as Kerberos 5.  2.5.0
does not.

> Does any of them support SSL?

No.  And don't ask for it unless you've gotten the US gov't to change
their silly ITAR restrictions.  There's an OLD (so old, the security
problems negate any good SSL does) set of patches against beta-13 or so
available .. it's referenced from the SSLeay main site.  You're on your
own for them.

-- 

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email-masked]
Kettering, OH 45409-1615 USA    1-800-809-2195