The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

VSFTP (Very Secure FTP Deamon)

Discussion in 'General Discussion' started by Dino, Sep 9, 2003.

  1. Dino

    Dino Registered

    Joined:
    Jun 23, 2003
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
  2. cortices

    cortices Well-Known Member

    Joined:
    Mar 10, 2003
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Dallas, TX
    I don't believe so but I would like the cPanel team to know I am definately interested in seeing future support for this FTP server. It appears to be the current leader in terms of performance and security.

    cPanel.net Support Ticket Number:
     
  3. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    Yes! This would be a very welcome inclusion and should be given immediate and serious consideration.

    Version 1.2.1 was released last month.

    Here is a list of some of the sites using vsftp as of Nov 2002:

    ftp.redhat.com
    ftp.suse.com
    ftp.debian.org
    ftp.gnu.org
    ftp.gnome.org
    ftp.kde.org
    rpmfind.net
    ftp.linux.org.uk
    ftp.gimp.org
    ftp-stud.fht-esslingen.de
    ftp.openbsd.org
    gd.tuwien.ac.at
    ftp.sunet.se
    ftp.ximian.com
    ftp.engardelinux.org

    Hard to argue some of those.
     
  4. danielaugustus

    danielaugustus Well-Known Member

    Joined:
    Oct 15, 2003
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    6
    I think all admins would LOVe this .

    I want it so much that I am building a PHP script to manage this vsftpd since cpanel doenst give us it ... I am building my own integration since this
     
  5. rs-freddo

    rs-freddo Well-Known Member

    Joined:
    May 13, 2003
    Messages:
    832
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    Seems like just another FTP server. I personally would like to see cpanel offer an SFTP server. I did see one on Freshmeat some months ago.
     
  6. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    SFTP is already supported. It's a part of SSH.
     
  7. rs-freddo

    rs-freddo Well-Known Member

    Joined:
    May 13, 2003
    Messages:
    832
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    Giving customers a shell so they can use FTP is not my idea of a security improvement - rather the reverse in fact.
     
  8. howard

    howard Well-Known Member

    Joined:
    Apr 20, 2003
    Messages:
    233
    Likes Received:
    0
    Trophy Points:
    16
  9. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    Do you give your clients access to perl or php? They can all be used to ussue shell commands and whatnot, depending on how locked down your box is. And don't pure and proftp already have some sort of secure connection ability?
     
  10. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    Version 2.01 has now been released and the vsftpd group has added:

    ftp.freebsd.org
    ftp.kernel.org
    ftp.sunsite.org.uk
    ftp.isc.org

    to their list of featured clients since my last post requesting consideration of its inclusion in the cPanel package.

    Please include this package (even if it is to the exclusion of the current offerings)!!
     
  11. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    I had a play with it once. I must say, though, that I did find it to be just another FTP server. I also noted that it recently had a serious remote vulnerability - which only goes to show that programmers are all human, no matter the advertising for their product ;)

    Personally, I'm happy with proftpd. After a few tweaks it is very quick and highly configurable and has inbuilt support on cPanel for FTP over SSL for those that don't want to offer SFTP access with an appropriate shell (http://www.pizzashack.org/rssh/).
     
  12. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    How true.

    I did only see one vulnerability listed however and it was patched prior to the listing. Compare that to proftpd. Also compare the pros and cons listed within cpanel for both pro and pureftpd and compare that to vsftpd.

    I think vsftpd is something that cpanel could settle on, eliminating some of the support confusion.

    Here are the configuration options for vsftpd just to give you more to consider.
     
  13. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    If you look at the site, you will see that it now says "Probably the most secure and fastest FTP server for UNIX-like systems." :)

    I do not remember if that "probably" was in there before or not ;)
     
  14. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    :eek: Maybe they learnt from Oracle's experience with "unbreakable" Oracle9i which was broken to pieces :D

    Good come back to the thread, btw :)
     
  15. myusername

    myusername Well-Known Member
    PartnerNOC

    Joined:
    Mar 6, 2003
    Messages:
    691
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    chown -R us.*yourbase*
    cPanel Access Level:
    DataCenter Provider
    Twitter:
    Is that sililar to the unsinkable Titanic? Names like that just seem to ask for someone to prove you wrong.
     
  16. cPanelBilly

    cPanelBilly Guest

    IT actually is not flexible enough for what cpanel needs which is why it is not an option.
     
  17. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    Please elaborate on that. I would think that cPanel would want to eliminate the pro/pure decision and instead settle on one daemon that addresses the shortcomings of each package. Maybe if you explain the issues with VSFTP they can be overcome.
     
  18. SarcNBit

    SarcNBit Well-Known Member

    Joined:
    Oct 14, 2003
    Messages:
    1,010
    Likes Received:
    3
    Trophy Points:
    38
    Recent development work and this comment has me concerned that cPanel may in fact be dropping ProFTP in favor of PureFTP. Is that being considered?
     
  19. icanectc

    icanectc Well-Known Member

    Joined:
    Mar 10, 2003
    Messages:
    344
    Likes Received:
    0
    Trophy Points:
    16
    God I hope not..SarcNBit
     
  20. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    I sincerely hope not too! I much prefer proftpd (I wish cPanel would add the obvious tweeks that make it so much quicker than the way they configure it). That ticket is also wrong - you can easily recompile proftpd to use pseudo-quotas.
     
Loading...
Similar Threads - VSFTP (Very Secure
  1. KC-Bill
    Replies:
    3
    Views:
    249

Share This Page