[Twisted-Python] new ftp implementation

[Jonathan Simms]

Jonathan Simms wrote:
> Hello all,
> 
> Just wanted to announce there is a new version of the ftp server/protocol.
> 
> the new protocol:
> 
>   - Supports cred, so you can control/abstract the filesystem
>   - includes an anonymous-only avatar/realm
>   - supports pipelining of commands
>   - intentionally does not support globbing (to help prevent security
>     holes)
>   - connection limiting (ex. max 100 users)
>   - individual timeouts for protocol interpreter idle time and dtp
>     connection times
> 
> todos:
>   - the permissions-checking needs improvement. I intend to set up an
>     option on the FTPFactory that will let you set the uid of the
>     anonymous user, but that's coming in the next week.
>   - path purification code needs improvement (to prevent intentionally    
>     stupid paths like "\\//*/*/../../*/.." from borking the server)
>   - a couple of other minor odds-and-ends

one more note, as of right now, the avatar i've implemented will only 
work on linux/unix (specifically platforms that support python's pwd and 
grp modules). patches for win32 would be greatly appreciated! :)

> 
> 
> there's an example tac file in sandbox/slyphon/ftp_refactor/ftpsrv.tac
> 
> comments, suggestions, etc. welcomed
> 
> 
> -Jonathan Simms
> slyphon at twistedmatrix.com
> 
> 
> _______________________________________________
> Twisted-Python mailing list
> Twisted-Python at twistedmatrix.com
> http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python