Greetings all, I'm needing to set up a new ftp server which will primarily be a public server (i.e. "anonymous" logins). I'll also need to set up some "group" logins for controlled "incoming" access (doesn't _have_ to be on the same sever). Aside: I can't see a (mini-)HOWTO on public ftp server setup - is there really not one? Given the recent flurry of correspondence on BugTraq etc re ftpd's I am, to say the least, a little cautious. So, my questions to the assembly here: 1) What are the "best" options to consider for this application? 2) What should be a avoided (e.g. XYZftpd << ver a.b.c; specific combinations of configurations with anon and "group" access). FWIW, I'll be implementing on Debian 2.1 (slink). To the moderator: I'm happy to summarize back to the list in a week or so Thanks, Neale. [mod: Yes, I'd appreciate that. People: Feel free to keep linux-security on the cc-list, but make sure you send to to Neale. He'll summarize... -- REW]