Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Debian Linux box with proftpd, we have both FTP and SFTP running, but we would like to disable regular FTP and just leave the SFTP running

Is there some way to do this?

share|improve this question
    
Actually you can have FTP and SFTP provided both by ProFTPd, depending on the configuration. – sjas Jun 5 '14 at 13:15

I haven't used ProFTPd my self in quite some time, but remembered it having FTPS support.

So do you really mean SFTP or did you mean FTPS? The earlier being the SSH implementation of a protocol with similar capabilities as FTP and the later being FTP secured by SSL/TLS.

on a quick search I found the following document on FTPS in ProFTPd http://www.proftpd.org/docs/howto/TLS.html

share|improve this answer

I recommend using SSH as well. Most FTP clients will support it. Also, if you add /usr/libexec/sftp-server (or whatever the path is on your system) to /etc/shells. You can grant SFTP access without giving full shell access.

One thing I do not like about openssh's SFTP protocol is, by default, it does not log transfers. If you need to log transfers, then you may want to check into VS-FTP. I am pretty sure VS-FTP supports FTP over SSL and SFTP as well as transfer logging. VS-FTP is default on Red Hat 5 I think.

share|improve this answer

It's been a while since this was first asked, but ProFTPD does support FTP, FTPS (via mod_tls), and SFTP (via mod_sftp) now. And to answer the question, you can configure ProFTPD to simultaneously allow both FTP and SFTP, or just SFTP only.

The same rich, configurable logging that ProFTPD does for FTP transfers is done for SFTP transfers.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.