| 1 |
slords |
1.1 |
# This is the ProFTPD configuration file |
| 2 |
|
|
# $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $ |
| 3 |
|
|
|
| 4 |
|
|
ServerName "ProFTPD server" |
| 5 |
|
|
ServerIdent on "FTP Server ready." |
| 6 |
|
|
ServerAdmin root@localhost |
| 7 |
|
|
ServerType standalone |
| 8 |
|
|
#ServerType inetd |
| 9 |
|
|
DefaultServer on |
| 10 |
|
|
AccessGrantMsg "User %u logged in." |
| 11 |
|
|
#DisplayConnect /etc/ftpissue |
| 12 |
|
|
#DisplayLogin /etc/ftpmotd |
| 13 |
|
|
#DisplayGoAway /etc/ftpgoaway |
| 14 |
|
|
DeferWelcome off |
| 15 |
|
|
|
| 16 |
|
|
# Use this to excude users from the chroot |
| 17 |
|
|
DefaultRoot ~ !adm |
| 18 |
|
|
|
| 19 |
|
|
# Use pam to authenticate (default) and be authoritative |
| 20 |
|
|
AuthPAMConfig proftpd |
| 21 |
|
|
AuthOrder mod_auth_pam.c* mod_auth_unix.c |
| 22 |
|
|
|
| 23 |
|
|
# Do not perform ident nor DNS lookups (hangs when the port is filtered) |
| 24 |
|
|
IdentLookups off |
| 25 |
|
|
UseReverseDNS off |
| 26 |
|
|
|
| 27 |
|
|
# Port 21 is the standard FTP port. |
| 28 |
|
|
Port 21 |
| 29 |
|
|
|
| 30 |
|
|
# Umask 022 is a good standard umask to prevent new dirs and files |
| 31 |
|
|
# from being group and world writable. |
| 32 |
|
|
Umask 022 |
| 33 |
|
|
|
| 34 |
|
|
# Default to show dot files in directory listings |
| 35 |
|
|
ListOptions "-a" |
| 36 |
|
|
|
| 37 |
|
|
# See Configuration.html for these (here are the default values) |
| 38 |
|
|
#MultilineRFC2228 off |
| 39 |
|
|
#RootLogin off |
| 40 |
|
|
#LoginPasswordPrompt on |
| 41 |
|
|
#MaxLoginAttempts 3 |
| 42 |
|
|
#MaxClientsPerHost none |
| 43 |
|
|
#AllowForeignAddress off # For FXP |
| 44 |
|
|
|
| 45 |
|
|
# Allow to resume not only the downloads but the uploads too |
| 46 |
|
|
AllowRetrieveRestart on |
| 47 |
|
|
AllowStoreRestart on |
| 48 |
|
|
|
| 49 |
|
|
# To prevent DoS attacks, set the maximum number of child processes |
| 50 |
|
|
# to 30. If you need to allow more than 30 concurrent connections |
| 51 |
|
|
# at once, simply increase this value. Note that this ONLY works |
| 52 |
|
|
# in standalone mode, in inetd mode you should use an inetd server |
| 53 |
|
|
# that allows you to limit maximum number of processes per service |
| 54 |
|
|
# (such as xinetd) |
| 55 |
|
|
MaxInstances 20 |
| 56 |
|
|
|
| 57 |
|
|
# Set the user and group that the server normally runs at. |
| 58 |
|
|
User nobody |
| 59 |
|
|
Group nobody |
| 60 |
|
|
|
| 61 |
|
|
# Disable sendfile by default since it breaks displaying the download speeds in |
| 62 |
|
|
# ftptop and ftpwho |
| 63 |
|
|
UseSendfile no |
| 64 |
|
|
|
| 65 |
|
|
# This is where we want to put the pid file |
| 66 |
|
|
ScoreboardFile /var/run/proftpd.score |
| 67 |
|
|
|
| 68 |
|
|
# Normally, we want users to do a few things. |
| 69 |
|
|
<Global> |
| 70 |
|
|
AllowOverwrite yes |
| 71 |
|
|
<Limit ALL SITE_CHMOD> |
| 72 |
|
|
AllowAll |
| 73 |
|
|
</Limit> |
| 74 |
|
|
</Global> |
| 75 |
|
|
|
| 76 |
|
|
# Define the log formats |
| 77 |
|
|
LogFormat default "%h %l %u %t \"%r\" %s %b" |
| 78 |
|
|
LogFormat auth "%v [%P] %h %t \"%r\" %s" |
| 79 |
|
|
|
| 80 |
|
|
# TLS |
| 81 |
|
|
# Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html |
| 82 |
|
|
#TLSEngine on |
| 83 |
|
|
#TLSRequired on |
| 84 |
|
|
#TLSRSACertificateFile /etc/pki/tls/certs/proftpd.pem |
| 85 |
|
|
#TLSRSACertificateKeyFile /etc/pki/tls/certs/proftpd.pem |
| 86 |
|
|
#TLSCipherSuite ALL:!ADH:!DES |
| 87 |
|
|
#TLSOptions NoCertRequest |
| 88 |
|
|
#TLSVerifyClient off |
| 89 |
|
|
##TLSRenegotiate ctrl 3600 data 512000 required off timeout 300 |
| 90 |
|
|
#TLSLog /var/log/proftpd/tls.log |
| 91 |
|
|
|
| 92 |
|
|
# SQL authentication Dynamic Shared Object (DSO) loading |
| 93 |
|
|
# See README.DSO and howto/DSO.html for more details. |
| 94 |
|
|
#<IfModule mod_dso.c> |
| 95 |
|
|
# LoadModule mod_sql.c |
| 96 |
|
|
# LoadModule mod_sql_mysql.c |
| 97 |
|
|
# LoadModule mod_sql_postgres.c |
| 98 |
|
|
#</IfModule> |
| 99 |
|
|
|
| 100 |
|
|
# A basic anonymous configuration, with an upload directory. |
| 101 |
|
|
#<Anonymous ~ftp> |
| 102 |
|
|
# User ftp |
| 103 |
|
|
# Group ftp |
| 104 |
|
|
# AccessGrantMsg "Anonymous login ok, restrictions apply." |
| 105 |
|
|
# |
| 106 |
|
|
# # We want clients to be able to login with "anonymous" as well as "ftp" |
| 107 |
|
|
# UserAlias anonymous ftp |
| 108 |
|
|
# |
| 109 |
|
|
# # Limit the maximum number of anonymous logins |
| 110 |
|
|
# MaxClients 10 "Sorry, max %m users -- try again later" |
| 111 |
|
|
# |
| 112 |
|
|
# # Put the user into /pub right after login |
| 113 |
|
|
# #DefaultChdir /pub |
| 114 |
|
|
# |
| 115 |
|
|
# # We want 'welcome.msg' displayed at login, '.message' displayed in |
| 116 |
|
|
# # each newly chdired directory and tell users to read README* files. |
| 117 |
|
|
# DisplayLogin /welcome.msg |
| 118 |
|
|
# DisplayFirstChdir .message |
| 119 |
|
|
# DisplayReadme README* |
| 120 |
|
|
# |
| 121 |
|
|
# # Some more cosmetic and not vital stuff |
| 122 |
|
|
# DirFakeUser on ftp |
| 123 |
|
|
# DirFakeGroup on ftp |
| 124 |
|
|
# |
| 125 |
|
|
# # Limit WRITE everywhere in the anonymous chroot |
| 126 |
|
|
# <Limit WRITE SITE_CHMOD> |
| 127 |
|
|
# DenyAll |
| 128 |
|
|
# </Limit> |
| 129 |
|
|
# |
| 130 |
|
|
# # An upload directory that allows storing files but not retrieving |
| 131 |
|
|
# # or creating directories. |
| 132 |
|
|
# <Directory uploads/*> |
| 133 |
|
|
# AllowOverwrite no |
| 134 |
|
|
# <Limit READ> |
| 135 |
|
|
# DenyAll |
| 136 |
|
|
# </Limit> |
| 137 |
|
|
# |
| 138 |
|
|
# <Limit STOR> |
| 139 |
|
|
# AllowAll |
| 140 |
|
|
# </Limit> |
| 141 |
|
|
# </Directory> |
| 142 |
|
|
# |
| 143 |
|
|
# # Don't write anonymous accesses to the system wtmp file (good idea!) |
| 144 |
|
|
# WtmpLog off |
| 145 |
|
|
# |
| 146 |
|
|
# # Logging for the anonymous transfers |
| 147 |
|
|
# ExtendedLog /var/log/proftpd/access.log WRITE,READ default |
| 148 |
|
|
# ExtendedLog /var/log/proftpd/auth.log AUTH auth |
| 149 |
|
|
# |
| 150 |
|
|
#</Anonymous> |
| 151 |
|
|
|
Parent Directory
| 
Revision Log
| 
Revision Graph
