ScFTPD by Rasmussen Software, Inc.  v3.0
==================================================================

ScFTPD is a FTP daemon for Windows that allows tight integration
into scripts or macros. While this was specifically designed for
scripting in AnzioWin, our telnet client, it holds its own as a
small-footprint FTP server.

ScFTPD was adapted from code by Delphi, Francois Piette and from 
the Mozilla Delphi project. The reason for this ftp daemon is 
a) a simple to control ftp server for use in Windows scripting 
and b) a command-line driven ftp server for Anzio and other 
scriptable environments, that allows 1 user and password, from 
1 host, to transfer either to or from a single directory, one time.

There is no warranty for this program as it is unsupported at this 
time. and you do use it at your own risk since we have no control 
over your Internet (and this is an Internet utility) and local
network. We cannot be held responsible for an problems caused or
loss of data in transfer or due to misuse by you or any other
person. However, we will do our best to provide what support we 
can, within limits. Give our office a call at 503-624-0260.

				Rasmussen Software, Inc.
				10240 SW Nimbus Ave., Suite L9
				Portland, Oregon 97223, USA


Format: 
-----------------------------------------------------------------
  scftpd	                          (to run interactively)

  scftpd <option> <home directory>        (to run from a script)

    where <options> can be
        -s                              start the server immediately 
	-o<port				port to listen on
	-h<host>			the only host to allow access to
	-u<user>			the only user to allow access to
	-p<password>			user password
	-i<inifile>			ini (default) file to use (include full path)
	-d				turn on debug messages
	-c<command>			the only command to allow ('get' or 'put')
	-1				run for only one transfer per user
	-1q				run for one transfer then quit
	-l				create log file
	-r -w -x			read, write and change directory
					  permissions for given home directory

  When you are running scftpd with command line parameters, you must
  provide a user name, password and the home directory as minimum
  requirements. Also when you run with command-line parameters, 
  and the server is set to start (-s) then "minimize on startup" is assumed.


Rules:
---------------------------------------------------------------
Rules are the key to the only security in ScFtpd and you should
pay attention to how you set these up if yyou are running this
program for more than an occasional use.

Rules are set up through the user interface and the File : Change Rules
menu item. Here you can enter rules to apply for host access and for
directory access.

The Defaults --- 

	By default, in version 3.0 any host can have access. Of 
	course they have to be able to log in with a user name
	and password. This was not true in prior versions (the
	default was denial of access).

	By default, in version 3.0 directory access is "read-only"
	for all directories except their home directory. This means
	that you cannot even change directory unless a Rule is set 
	up to allow you to (you are locked to the home directory).
        The home directory permissions are set under the
	File : Manage Users menu item.

	If you are running with a specific user and allowing access
	from a specific host to a specific directory, then these 
	rules may not come into play.
	
How To Enter Rules ---

	-Rules are processed in the order in which they appear on
	the screen (and in the ini file scftpd.ini). So you can 
	start by denying access to all hosts or all directories,
	this will take place first.

	-"Host Rules" are entered as the host portion followed by
	either the keyword "deny" or "allow". Wildcards are permitted
	and based on the beginning of the host string (IP address). 
	Some examples:
			192.168=allow
	would allow access from a private network where the IP address
 	begins with 192.168 and
			66.210.23.2=deny
	would specifically deny access to the PC with this IP address
	You can change the default for host access from allow to deny
        by entering
			*=deny

	-"Directory Rules" are entered as the specific directory
	followed by the permissions you wish to grant it. If you do
	not list a directory here, it will be marked as read-only,
	which means someone could still download from it. Some examples
			c:\windows=
	would prevent any access to the Windows directory, while
			c:\temp=rwx
	would give 'read', 'write' and 'change directory to' the 	
	the \temp directory. Again, you can override the default
	of read-only by giving the following
			*=rwx
	to allow access to everything, or
			*=
	to allow access to nothing. However, the home directory still
	would be accessible as long as the user logging in had proper
	permissions.



Notes When Connecting From Client
--------------------------------------------------------------------
Many ftp client commands are not supported yet. Partly because of 
security issues, partly because of lack of time to implement and they
do not necessarily add anything to a scriptable server.

On some servers, such as RedHat, where the vsftp client is used, a 
connection may not always be established without providing a port.
By default, the port is 21 (standard ftp port) but it can be changed
through the menu system or in the .ini file. On some installations
of the vsftp, you may need to include the port when attaching:
	ftp 192.168.100.10 21

Firewalls and other security devices may cause problems if proxies are
not set correctly or they are blocking port traffic to or from this PC.
Personal Firewalls may also detect access incoming to this PC or 
outgoing from a client as mischievous acts and either warn or block
the access.

At present, ScFtpd does not support complete passive. This may depend
on your client also, so you can give it a try to see.

At present, ScFtpd does not support any encryption, so passwords
and the data being transfered may be clear text and subject to 
be viewed.



Still To Do:     
--------------------------------------------------------------------
  o expand security
  o completely command-line driven (don't show messagesor dialog & no ini)
  o single transfers, not just single action (when to quit)
  o multiple file transfers including wildcard support
  o 'HELP' command support
  o support additional commands a client could send
	specifically need support for
		newer <filename> [<local-filename>]
		mget <files>
		mput <files>
		cd                  (go back to homedir)
		append local-file
		passive
		file name globbing
		site
		quote
		....
  o tray icon
  o log additional debug text
  o Win32 service
  o make more robust (multithread, clean up code, support Indy)
  o support for ssh's sftp protocol
  o globbing of "system" command
  o other transfer types (ebcdic, ... ?)
  o encrypt passwords


History
--------------------------------------------------------------------

This program started as a small, scriptable FTP server for use with
our AnzioWin product and Dynix library card catalog systems. It has
expanded to be used from most any script engine with adequate security
provided.

9-2001
  Release 1.0.2	
	- Corrected issue in logging
	- Added some rules-based security for host and directories
	- Added support for changing directories
	- Added support for maximum client connections
12-2002
  Version 2.0.0
	- Added and improved GUI front end
	- Added ini file support to save settings
	- Corrected problems in host authentication
	- Added checking for illegal (non-supported) commands from client
  release 2.0.1
	- Added default security access to home directory, others and
		for authentication of hosts (deny dir access, deny hosts
		not in rules)
  release 2.2.0
	- Eased up on host rules
	- Cleaned up user authentication with no password
12-2003
  version 3.0
	- Took out anonymous user support
	- Added error checking when running from command-line, must
	  	have user, password and a home directory
	- Changed defaults for security to allow all hosts (but still
		must have user/password) and to set all directory
		accesss is 'read-only'
	- Changed to allow startup from command-line and to minimize
		when it does
	- Added support for wildcard rule handling
	- Changed entire rules handling to separate host from directory
	- Cleaned up "Manage Users" dialog
4-2004
  release 3.0.2
	- Changed to have full path with inifile name for Win9x
5-2004
  release 3.0.3
	- Changed to correct problem with setting rules
	- Changed storage of rules
	- Changed default settings for rules to clean up issues with Dynix
		and always forcing a CWD even if none needed.


====================================================================
Rasmussen Software, Inc.
10240 SW Nimbus Ave., Suite L9
Portland, Oregon 97223 USA
Ph:     503-624-0360
Fax:    503-624-0760
Email:  rsi@anzio.com
Web:    www.anzio.com