Setting Up Intermediate FTP Server

[SpanishFry]

I'm going to set up an FTP site that will have 10-20 users. I've got the co-location site picked out, etc. so it will be publicly accessible.

My question is how would you go about setting it up, locking it down, and everything? What OS? FTP Server? How to control access?

Basically I want to run a stable site that will not be hacked.

 

[nweaver]

if the 10-20 users are people you know and trust, I would say go with sftp via SSH on a linux box.


I can't tell you how to set it up, cause I have been too lazy so far to do it, and I am still running normal FTP. (gotta fix that this weekend I think, need to learn for a box at work)

 

[SpanishFry]

let's say i don't really trust them much. friends of firends, etc.

 

[nweaver]

The difference is that FTP transmits passwords in the clear, sFTP is encrypted/secured. You can also secure SSH and use certificates to allow/deny access.

 

[SpanishFry]

do you have any links for doing sftp via ssh? a guide would be great.

 

[nweaver]

http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html for windows SSH, sftp, and a command line sftp client. SSH is pretty easy, lots of docs, and is somewhat distro dependant. RedHat 9 was nice and easy. http://www.mines.edu/~gmurray/HowTo/sshNotes.html looks like it might be a good guide (I didn't read through it all the way).

Basicly, get an sftp client, and login to the box, nice and easy.