setting up ftp to allow /var/www/htdocs

[ershiba]

hi all,
i started the built-in ftpd_flags="-D" in /etc/rc.conf.local

if i use ftp in, i could write in /home/oem only (my user id is oem)

what is the best security practice that i should do in order to write to /var/www/htdocs ?

i am doing for web development, i would code the php scripts in my windoze machine and upload it using ftp client and run test it on browser,

just want to confirm, is vsftpd a better tools for such situation?

or, i should do the following,

$ cd /var/www/htdocs
$ sudo ln -s ../../../../home/oem/website-abc.com website-abc.com

thanks in advance.

a little bit update

$ cd /var/www/htdocs
$ sudo ln -s ../../../../home/oem/website-abc.com website-abc.com

doesn't seem to works,

[ershiba]

i did the following, but i still need you guys advices,

$ cd /var/www
$ sudo mkdir website-abc
$ cd htdocs
$ sudo ln -s ../website-abc abc
$ cd /var/www
$ sudo chown -R oem website-abc
$ cd ~
$ sudo ln -s /var/www/website-abc abc

so, when i ftp into, i go to ftp://192.168.56.200/abc/
then i would able to upload every files,

it seems working, but is it fine ( in terms of security & logic ) to set this in such a way?

[jggimi]

The best security practice is not to use FTP on an insecure network except for "anonymous" downloads. All FTP traffic, including userid and password transmission, is conducted in the clear. On OpenBSD, the secure replacement for FTP is sftp(1), a component of OpenSSH. This uses SSH for file transfer, and includes completely encrypted traffic and the entire suite of SSH authentication methods. On Windows, OpenSSH (including sftp) is available under Cygwin.

By default, /var/www/htdocs is owned by root:daemon and the directory is filemode 755, so only root has write access. Rather than creating a series of symbolic links, you could change htdocs ownership to oem:daemon.

[J65nko]

You can use FileZilla. It runs on Windows, Linux, Mac OS X and the BSD's.
To configure Filezilla to use scp or sftp see http://forum.filezilla-project.org/v...c.php?f=3&t=76

[ershiba]

thanks for the concern guys,
i would switch to sftp soon =)