ServerName "XSebbis FTP-Server" #ServerType inetd ServerType standalone ServerAdmin root@localhost ServerIdent on "FTP Server ready" DeferWelcome off DefaultServer on AuthPAM on #AuthPAMAuthoritative off AuthPAMConfig proftpd Port 21 #SocketBindTight on Umask 022 User ftp Group public AllowOverwrite off HiddenStor on AllowRetrieveRestart on HideNoAccess on AllowAll #HideNoAccess on DenyAll IgnoreHidden on # It is a very good idea to allow only filenames containing normal # alphanumeric characters for uploads (and not shell code...); # see also the PathDenyFilter option PathAllowFilter ".*/[a-zA-Z0-9]+$" PathAllowFilter ".*/[a-zA-Z0-9~ \*\/,_.-]+$" # Do not allow to pass printf-Formats (see also AllowFilter option): DenyFilter "%" MaxInstances 30 #UseReverseDNS off IdentLookups off #TimeoutStalled 300 ScoreboardPath /var/run/proftpd TransferLog /var/log/xferlog LogFormat default "%h %l %u %t \"%r\" %s %b" LogFormat auth "%v [%P] %h %t \"%r\" %s" LogFormat write "%h %l %u %t \"%r\" %s %b" ExtendedLog /var/log/proftpd.access_log WRITE,READ write ExtendedLog /var/log/proftpd.auth_log AUTH auth ##ExtendedLog /var/log/proftpd.paranoid_log ALL default #DefaultRoot ~/public_html public,!users #DefaultRoot /pub/ users #DefaultRoot ~ #MaxLoginAttempts 3 #RequireValidShell yes #AuthUserFile /var/proftpd/authfiles/passwd #AuthGroupFile /var/proftpd/authfiles/group #LDAPServer "localhost" #LDAPPrefix "dc=your,dc=domain,dc=top" #LDAPDN "cn=YourDNUser,dc=your,dc=domain,dc=top" #LDAPDNPass "YourDNUserPassword" # # After anonymous login, daemon runs as: User ftp Group users # # # We want clients to be able to login with "anonymous" as well as "ftp" UserAlias anonymous ftp # # # Limit the maximum number of anonymous logins MaxClients 10 # # # We want 'welcome.msg' displayed at login, and '.message' displayed # # in each newly chdired directory. DisplayLogin msgs/welcome.msg DisplayFirstChdir .message # # # Deny write operations to all directories, underneath root-dir # # Default is to allow, so we don't need a for read operations. DenyAll # # # # Only uploads into incomming directory are allowed... # # # # # # Umask 017 # # # # # ... so deny read/write # # # # DenyAll # # # # # # # ... allow file storing, but not other writes # # # # AllowAll # # # # # # # RootLogin off AuthPAM on