Hello, I've searched the forums and found a little bit of info concerning my problems.

Anyway, Just need a few things cleared up

I’ve installed Pure-ftp. Every thing is fine except I don’t think it is secure enough and have very little knowledge of how ftp services work.

Here are my questions...

Answers/suggestions are welcome...

Is it normal for all users and even root to be able to access ftp?

How do I stop root from being able to be accessed through ftp?

In reading another thread concerning ftp, users and apache. I was pointed to this documentation apache.org/docs-2.0/mod/mod_alias.html#alias. Is this the best was to do this? Or what would one suggest?

How do I stop ftp users from being able to view anything but their folder? Is there a better way then making every folder in the file system but their folder only 'viewable' by root?

Thanks

(if you have it) PAM is the best way to block/allow user access thru FTP(or any other service).

there should be options you can set in the config file for disallowing root, or some programs like proftpd don't allow root logins by default. you should also be able to set the default root directory or a kind of chroot jail to limit users to the specified directories. have you read the pureftpd documentation? i'm sure it must be covered in there, as these are pretty basic functions. gl

Try running vsftpd if you want a more secured ftp server. It's pretty much set up out of the box. vsftpd