I've been running a hosting business without control panels for a long time, and am now preparing to migrate it to cPanel at EV1.

For years we've read that it's foolhardy to leave insecure protocols such as FTP and telnet enabled, e.g.:

http://www2.warwick.ac.uk/services/its/saf...y/linux/remote/

So one of the first things I do when setting up a new box is to disable port 21 in the firewall and disable the startup script in /etc/rc.d at the same time I disable telnet. My users have never had a problem using SFTP/SCP -- I recommend a variety of SFTP clients and everyone gets a secure connection. I was pretty surprised that cPanel and WHM place such an implicit assumption that everyone is using vanilla FTP.

Anyway, my question is: Will leaving FTP disabled on a cPanel box have any ill effect on auto-updates or anything else? Is there any reason I shouldn't disable it?

Thanks,
Scot

no reason at all that I know of

I have the same practice you're talking about on Ensim, congratulations... I have heard such behavior from very few people

regards