oftpd is designed to be as secure as an anonymous FTP server can possibly be. It runs as non-root for most of the time, and uses the Unix chroot() command to hide most of the systems directories from external users--they cannot change into them even if the server is totally compromised. It also contains its own directory-change and directory-listing code (most FTP servers execute the system "ls" command to list files).
| Tags | Internet FTP |
|---|---|
| Licenses | BSD Original BSD Revised |
| Operating Systems | POSIX Linux |
| Implementation | C |
Recent releases


Changes: This release fixes a DoS vulnerability.


Changes: A --nodetach flag for operation from init has been added, as well as support for graceful shutdown on SIGTERM/SIGINT, and the use of TCP_NODELAY and sendfile() for efficiency. This release also contains some minor security and bug fixes.


Changes: A sample Red Hat init script, man page, and FAQ, and most server runtime errors are non-fatal.


Changes: A glob() denial-of-service fix, random port sequencing, compile fixes for some systems, and a couple of minor bugfixes.


Changes: This is Yet Another Debian Compile Release. It also fixes a bug in passive transfers and uses the RFC 959 default data port for transfer if it's not otherwise specified.
- All comments
Recent commentsRe: compile
> It doesn't compile quite ok on debian
> slink, complains about
> off_t, being unable to determine its
> size.
This, and several other compilation issues, have
been addressed in the 0.3.3 release.
compile
It doesn't compile quite ok on debian slink, complains about
off_t, being unable to determine its size.