[plug] re: FTP set-up

[Matt Kemner]

On Thu, 29 Jun 2000, Jon L. Miller wrote:

> Anyone care to give pointers on setting up a secure FTP site (eg non
> anonftp)?

I think enough people have mentioned the plain-text password security
risk, so I wont.

Install proftpd, and add an entry to the config file like:

<Anonymous ~potato>
   AnonRequirePassword on
   User potato
   Group users
   RequireValidShell off
   <Directory *>
     <Limit WRITE>
       DenyAll
     </Limit>
   </Directory>
</Anonymous>

Then add a user "potato" to your system and restart proftpd.
Then, if someone ftp's in with potato (and the correct password) they will
be restricted to their home directory in the same way anonymous users are
restricted to the /home/ftp directory. (using chroot)

 - Matt