> why even enable std ftp? > i just assume disable it in xinetd and just go with > the first half of your solution. Wouldn't the user's client display the error message? A "sorry, you have to use sftp" message is far more user-friendly than an unexplained failure to connect. (BTW the xinetd stanza just runs that script on that port, not a ftp daemon.)