FTP server - tips on firewall, anti-virus and OS

[vbell]

I'm setting an old computer up that I was thinking about making a clean FTP server of.

The hardware is pretty old, so I'm mostly wondering what type of software I should run to achieve an optimal server environment.

This is the computer:

AMD X2 4200 +
250GB HDD
2GB DDR
XP Home

I going to use FileZilla's server with a 100/100Mbit connection.

I can choose between legitimate versions of XP, 2000 and 7 Pro (32 and 64-bit).

What I need help with is:

1st Which operating system? Heard that 2000 is quite stable. However, I could run 64-bit W7 and buy more RAM to 2GB (will it be a big difference?)

2nd What type of free firewall and anti-virus? In W7 I assume that the built-in works well, using it myself to my primary desktop.

Thanks in advance!

 

[tlarkin]

Use the most up to date OS, there will be less exploits for it. Also make sure you set up SFTP, because FTP sends user name and password in clear text across our network and is not safe.

 

[deanj20]

I recommend installing Linux for a file server - virtually any distro will come equipped w/ ssh/ftp out of the box. As for security, make sure that you implement strong usernames and passwords (i.e. no "test" "test" account, or username:steve passwordassword1), as most bots try to "brute force" their way into an ssh server. Disallow root access and make sure that your folder permissions are setup correctly.

If you decide to go the Windows/Filezilla route, definitely use SFTP (like tlarkin suggested) and use an up-to-date, fully-patched Windows installation, and keep other services minimal so they won't be "seen" by people looking to exploit your machine.

As for a firewall, the best solution is to put your system behind a router, and then open the ssh/ftp ports (22/21 by default) to your machine. If that's not an option, you can use a software firewall, but I'm not sure what's good these days - I've been using routers for the last 5 years...