$Id: README,v 1.3 2000/03/12 14:04:29 shane Exp $

Introduction

oftpd is designed to be as secure as an anonymous FTP server can possibly be. 
It runs as non-root for most of the time, and uses the Unix chroot() command
to hide most of the systems directories from external users - they cannot
change into them even if the server is totally compromised!  It contains its
own directory change code, so that it can run efficiently as a threaded
server, and its own directory listing code (most FTP servers execute the
system "ls" command to list files).  It is currently being code-reviewed for
buffer overflows, and being extensively load-tested.


History

I wrote oftpd to fill a need we had at my company.  Our public FTP site was a 
mess, and in addition to reorganizing organizing the hierarchy and file layout
I wanted to get the latest version of our FTP server software.  It turns out
that the version we had had had a number of security issues.  So I decided
to find an anonymous-only, secure FTP server.  None of the ones I found 
were fully baked.  Time to write my own.  :)


Installation

See the INSTALL file.


Shane Kerr
shane@time-travellers.org
