I'd like to add a really simple local FTP server to my FreeBSD system, to allow guests to do wifi speed testing.
Because of the use, I don't need more than very basic functionality - anon R/W to a specific IP address/port is about all. But it needs to be secure - no escaping! - because it's open by design to anyone able to connect to the WiFi.
If it helps, I have the option to install on a full FreeBSD system, or ideally on my OPNsense system itself, which controls the WiFi (OPNsense is a very similar fork of pfSense so pfSense-fu will probably apply). They all use FreeBSD or a hardened variant of it as base OS.
I haven't manually configured a jail or chroot before, so I don't want to make mistakes by overlooking anything.
What is the easiest way I could achieve this?
Update - HTTP/web, vs FTP?
I originally asked about ftp, because it seemed simpler and less that could go wrong or allow escape. The more complex a software is, the more surface for bugs/errors/insecurity/config oversights it can have, and web servers must be far more complex than ftp servers!
I also figured that an ftp server probably has lower resource use, as it'll be idle 99.999% of the time, and maybe more efficient when used (again less it needs to check), and as all I want is raw maximum throughout, the less it has to be configured for balancing different uses or engines, the better.
I don't need a fancy interface (though "something nice" won't hurt) and I want to keep it really simple, ideally one service, one config file/rc setup, and if I used http, a single static top level web page + target file. Really simple, manually set up not a full downloaded "project". It just won't be used often enough for that. It'll mainly be used to check from time to time, how guest device reception is in different areas, and how the WiFi is handling power/channel regulations + contention, if someones device seems to be running slow, to see if its ok or if we need to revisit channel setup.