VSFTP Redhat 8 File Transfer Security

joshnya · 02-10-2003, 07:39 PM

I am a new user of Linux and have just set up my first RedHat box dedicated to FTP file transfers.

I am wondering about the security of the VSFTP server during login and file transfer - what's encrypted specifically.

I see there is plenty of documentation about server setup (thank you) but I don't see anything about how the server protects data that is being passed.

Can someone please give a breif description of the security VSFTP provides client machines that are using passing data through it?

Thanks very much.

unSpawn · 02-11-2003, 06:02 AM

Load up tcpdump on the interface Vsftp runs on, then log in using a login/passwd. Stop tcpdump and reread the dump. See?

AFAIK only SSLftpd and Bsdftpd-ssl do encrypted logins/transfers, but then again SSLftpd does fall back to "regular" connections for anonymous access (logically) and it's based on wu-ftp (bad security record).

*"Secure" in Vsftpd means it's code doesn't have (known) flaws crackers can exploit.

joshnya · 02-11-2003, 06:22 AM

Thanks unSpawn

It sounds like Bsdftpd-ssl is the product I'm looking for...secure, encrypted transfers.

Since I'm such a

, can you direct me to where I can download the official Bsdftpd-ssl RPM?

Respectfully,
--joshnya

unSpawn · 02-11-2003, 06:33 AM

Try rpmfind.net or rpm.pbone.net