# This is a basic ProFTPD configuration file
#
# It establishes a single server and a single anonymous login.
# It assumes that you have a user/group "nobody" and "ftp"
# for normal operation and anon.
ServerIdent on "Welcome ko-jiya528 server"
ServerName "ProFTPD Default Installation"
ServerType standalone
DefaultServer on
# Shared Object (DSO) loading
<IfModule mod_dso.c>
LoadModule mod_ident.c
LoadModule mod_unique_id.c
</IfModule>
IdentLookups off
UniqueIDEngine on
#ListOptions "-a"
TCPAccessFiles /etc/hosts.allow /etc/hosts.deny
AuthUserFile /etc/ftpd.passwd
AuthGroupFile /etc/ftpd.group
AuthOrder mod_auth_file.c mod_auth_unix.c
# Port 21 is the standard FTP port.
Port 21
PassivePorts 50000 50030
# Don't use IPv6 support by default.
UseIPv6 off
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022
# Use localtime
TimesGMT off
SetEnv TZ JST-9
# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30
# Define the log formats
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth "%v [%P] %h %t \"%r\" %s"
Systemlog /var/log/proftpd/proftpd.log
# Set the user and group that the server normally runs at.
User nobody
Group nobody
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~ !wheel
<Limit LOGIN>
Order deny,allow
Deny from 192.168.0.21
Allow from 192.168.0.0/24
</Limit>
# Normally, we want files to be overwriteable.
AllowOverwrite on
# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
Order deny,allow
Deny from 192.168.0.21
Allow from 192.168.0.0/24
</Limit>
# mod_tls configuration.
<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
TLSProtocol SSLv3 TLSv1
TLSRequired off
TLSRSACertificateFile /etc/pki/tls/certs/www-server.crt
TLSRSACertificateKeyFile /etc/pki/tls/private/www-server.key
TLSOptions NoCertRequest NoSessionReuseRequired
TLSVerifyClient off
TLSRenegotiate none
</IfModule>
# A basic anonymous configuration, no upload directories.
<Anonymous /home/ftp>
TransferRate RETR 10
User ftp
Group ftp
# We want clients to be able to login with "anonymous" as well as "ftp"
UserAlias anonymous ftp
RequireValidShell off
# Limit the maximum number of anonymous logins
MaxClients 10
MaxClientsPerHost 1
MaxHostsPerUser 1
# We want 'welcome.msg' displayed at login, and '.message'
# displayed in each newly chdired directory.
DisplayLogin welcome.msg
DisplayChdir .message
# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>
<Limit LOGIN>
AllowAll
</Limit>
<Limit SITE_CHMOD>
DenyAll
</Limit>
# Logging for the anonymous transfers
ExtendedLog /var/log/proftpd/access.log WRITE,READ default
ExtendedLog /var/log/proftpd/auth.log AUTH auth
</Anonymous>
|
proftpd.confの設定
proftpd.confの修正