Forum

#

# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.

# To really apply changes reload proftpd after modifications.

#



# Includes DSO modules

Include /etc/proftpd.d/*.conf



# This is the directory where DSO modules resides



ModulePath /usr/lib/proftpd



# Allow only user root to load and unload modules, but allow everyone

# to see which modules have been loaded



ModuleControlsACLs insmod,rmmod allow user root

ModuleControlsACLs lsmod allow user *



ServerName "ProFTPD Default Installation"

ServerType standalone

DeferWelcome off



MultilineRFC2228 on

DefaultServer on

ShowSymlinks on



TimeoutNoTransfer 600

TimeoutStalled 600

TimeoutIdle 1200



DisplayLogin welcome.msg

DisplayChdir .message

ListOptions "-l"

DenyFilter *.*/

UseIPv6 Off



# Allow FTP resuming.

# Remember to set to off if you have an incoming ftp for upload.

AllowStoreRestart on



# Port 21 is the standard FTP port.

Port 21



# In some cases you have to specify passive ports range to by-pass

# firewall limitations. Ephemeral ports can be used for that, but

# feel free to use a more narrow range.

#PassivePorts 49152 65534



# To prevent DoS attacks, set the maximum number of child processes

# to 30. If you need to allow more than 30 concurrent connections

# at once, simply increase this value. Note that this ONLY works

# in standalone mode, in inetd mode you should use an inetd server

# that allows you to limit maximum number of processes per service

# (such as xinetd)

MaxInstances 30



# Set the user and group under which the server will run.

User nobody

Group nogroup



# Umask 022 is a good standard umask to prevent new files and dirs

# (second parm) from being group and world writable.

Umask 022 022



# To cause every FTP user to be "jailed" (chrooted) into their home

# directory, uncomment this line.

#DefaultRoot ~



# Normally, we want files to be overwriteable.

AllowOverwrite on



# Uncomment this if you are using NIS or LDAP to retrieve passwords:

PersistentPasswd off



# Be warned: use of this directive impacts CPU average load!

#

# Uncomment this if you like to see progress and transfer rate with ftpwho

# in downloads. That is not needed for uploads rates.

#UseSendFile off



TransferLog /var/log/proftpd/proftpd.log

SystemLog /var/log/proftpd/proftpd.log



<IfModule mod_tls.c>

TLSEngine off

</IfModule>



<IfModule mod_quota.c>

QuotaEngine on

</IfModule>



<IfModule mod_ratio.c>

Ratios on

</IfModule>



# Delay engine reduces impact of the so-called Timing Attack described in

# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02

# It is on by default.

<IfModule mod_delay.c>

DelayEngine on

</IfModule>



<IfModule mod_ctrls.c>

ControlsEngine on

ControlsMaxClients 2

ControlsLog /var/log/proftpd/controls.log

ControlsInterval 5

ControlsSocket /var/run/proftpd/proftpd.sock

</IfModule>



<IfModule mod_ctrls_admin.c>

AdminControlsEngine on

</IfModule>



# Bar use of SITE CHMOD by default

<Limit SITE_CHMOD>

DenyAll

</Limit>

/etc/proftpd.conf reload

/etc/proftpd.conf: ligne7: Include : commande introuvable

/etc/proftpd.conf: ligne11: ModulePath : commande introuvable

/etc/proftpd.conf: ligne16: ModuleControlsACLs : commande introuvable

/etc/proftpd.conf: ligne17: ModuleControlsACLs : commande introuvable

/etc/proftpd.conf: ligne19: ServerName : commande introuvable

/etc/proftpd.conf: ligne20: ServerType : commande introuvable

/etc/proftpd.conf: ligne21: DeferWelcome : commande introuvable

/etc/proftpd.conf: ligne23: MultilineRFC2228 : commande introuvable

/etc/proftpd.conf: ligne24: DefaultServer : commande introuvable

/etc/proftpd.conf: ligne25: ShowSymlinks : commande introuvable

/etc/proftpd.conf: ligne27: TimeoutNoTransfer : commande introuvable

/etc/proftpd.conf: ligne28: TimeoutStalled : commande introuvable

/etc/proftpd.conf: ligne29: TimeoutIdle : commande introuvable

/etc/proftpd.conf: ligne31: DisplayLogin : commande introuvable

/etc/proftpd.conf: ligne32: DisplayChdir : commande introuvable

/etc/proftpd.conf: ligne33: ListOptions : commande introuvable

/etc/proftpd.conf: ligne34: DenyFilter : commande introuvable

/etc/proftpd.conf: ligne35: UseIPv6 : commande introuvable

/etc/proftpd.conf: ligne39: AllowStoreRestart : commande introuvable

/etc/proftpd.conf: ligne42: Port : commande introuvable

/etc/proftpd.conf: ligne55: MaxInstances : commande introuvable

/etc/proftpd.conf: ligne58: User : commande introuvable

/etc/proftpd.conf: ligne59: Group : commande introuvable

/etc/proftpd.conf: ligne63: Umask : commande introuvable

/etc/proftpd.conf: ligne70: AllowOverwrite : commande introuvable

/etc/proftpd.conf: ligne73: PersistentPasswd : commande introuvable

/etc/proftpd.conf: ligne81: TransferLog : commande introuvable

/etc/proftpd.conf: ligne82: SystemLog : commande introuvable

/etc/proftpd.conf: ligne84: Erreur de syntaxe près du symbole inattendu « newline »

/etc/proftpd.conf: ligne84: `<IfModule mod_tls.c>'

#

# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.

# To really apply changes reload proftpd after modifications.

#



# Includes DSO modules

Include /etc/proftpd.d/*.conf



# This is the directory where DSO modules resides



ModulePath /usr/lib64/proftpd



# Allow only user root to load and unload modules, but allow everyone

# to see which modules have been loaded



ModuleControlsACLs insmod,rmmod allow user root

ModuleControlsACLs lsmod allow user *



ServerName "Mon serveur ProFTPD"

ServerType standalone

DeferWelcome on



MultilineRFC2228 on

DefaultServer on

ShowSymlinks on



TimeoutNoTransfer 600

TimeoutStalled 600

TimeoutIdle 1200



DisplayLogin welcome.msg

DisplayChdir .message

ListOptions "-l"

DenyFilter *.*/

UseIPv6 Off



# Allow FTP resuming.

# Remember to set to off if you have an incoming ftp for upload.

AllowStoreRestart on



# Port 21 is the standard FTP port.

Port 21



# In some cases you have to specify passive ports range to by-pass

# firewall limitations. Ephemeral ports can be used for that, but

# feel free to use a more narrow range.

#PassivePorts 49152 65534



# To prevent DoS attacks, set the maximum number of child processes

# to 30. If you need to allow more than 30 concurrent connections

# at once, simply increase this value. Note that this ONLY works

# in standalone mode, in inetd mode you should use an inetd server

# that allows you to limit maximum number of processes per service

# (such as xinetd)

MaxInstances 30



# Set the user and group under which the server will run.

User nobody

Group nogroup



# Umask 022 is a good standard umask to prevent new files and dirs

# (second parm) from being group and world writable.

Umask 022 022



# To cause every FTP user to be "jailed" (chrooted) into their home

# directory, uncomment this line.

#DefaultRoot ~



# Normally, we want files to be overwriteable.

AllowOverwrite on



# Uncomment this if you are using NIS or LDAP to retrieve passwords:

PersistentPasswd off



# Be warned: use of this directive impacts CPU average load!

#

# Uncomment this if you like to see progress and transfer rate with ftpwho

# in downloads. That is not needed for uploads rates.

#UseSendFile off



TransferLog /var/log/proftpd/xferlog

SystemLog /var/log/proftpd/proftpd.log



<IfModule mod_tls.c>

TLSEngine off

</IfModule>



<IfModule mod_quota.c>

QuotaEngine on

</IfModule>



<IfModule mod_ratio.c>

Ratios on

</IfModule>



# Delay engine reduces impact of the so-called Timing Attack described in

# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02

# It is on by default.

<IfModule mod_delay.c>

DelayEngine on

</IfModule>



<IfModule mod_ctrls.c>

ControlsEngine on

ControlsMaxClients 2

ControlsLog /var/log/proftpd/controls.log

ControlsInterval 5

ControlsSocket /var/run/proftpd/proftpd.sock

</IfModule>



<IfModule mod_ctrls_admin.c>

AdminControlsEngine on

</IfModule>



# Bar use of SITE CHMOD by default

<Limit SITE_CHMOD>

DenyAll

</Limit>



ServerAdmin monmail@mail.fr

RootLogin off

AllowForeignAddress on

AllowRetrieveRestart on

DefaultRoot ~

DirFakeUser off nobody

LogFormat auth "%v [%P] %h %t "%r" %s"

Extendedlog /var/log/proftpd/ftp.log

UseReverseDNS off

LogFormat default "%h %l %u %t "%r" %s %b"

DisplayConnect /etc/banner-proftpd

DirFakeGroup off nobody

DeleteAbortedStores off

IdentLookups off

TimesGMT off

AccessGrantMsg " -- Guest access granted for %u --"

ServerIdent off

LogFormat write "%h %l %u %t "%r" %s %b"

AccessDenyMsg " !-!! ACCESS DENY !!-! SEEMS YOU HAVE NO RIGHT THERE !!"



<Anonymous ~ftp>



# Allow logins if they are disabled above.

<Limit LOGIN>

AllowAll

</Limit>



# Maximum clients with message

MaxClients 5 "Sorry, max %m users -- try again later"



User ftp

Group ftp

# We want clients to be able to login with "anonymous" as well as "ftp"

UserAlias anonymous ftp

RequireValidShell off



# Limit WRITE everywhere in the anonymous chroot

<Limit WRITE>

DenyAll

</Limit>



</Anonymous>