- from Debian

[packages/proftpd.git] / proftpd.conf

diff --git a/proftpd.conf b/proftpd.conf
index 75ae81d8e985745fbadd50b8e8887e2d96f27819..5d2538480170246f99661f1b1879b00c25089248 100644 (file)
--- a/proftpd.conf
+++ b/proftpd.conf
@@ -1,47 +1,13 @@
-# This is a basic ProFTPD configuration file (rename it to 
-# 'proftpd.conf' for actual use.  It establishes a single server
-# and a single anonymous login.  It assumes that you have a user/group
-# "nobody" and "ftp" for normal operation and anon.
+# $Id$
 
 ServerName                     "ProFTPD"
-ServerIdent                    off
-ServerType                     inetd
-DeferWelcome                   off
-DefaultServer                  on
+ServerType                     standalone
+DeferWelcome           off
+DefaultServer          on
 
 # If you want .message files to work with browsers, you probably
 # want to uncomment the next line
-#MultilineRFC2228              on
-
-# TCPD configuration
-# TCPServiceName                       ftp
-#TCPAccessFiles                        None
-#TCPAccessSyslogLevels         info warn
-#TCPGroupAccessFiles           None
-#TCPUserAccessFiles            None
-
-# These are the TLS related options, default values
-#TLSEngine                     off
-#TLSProtocol                   SSLv23
-#TLSCipherSuite                        ALL:!ADH
-#TLSRSACertificateFile         None
-#TLSRSACertificateKeyFile      None
-#TLSDSACertficateFile          None
-#TLSDSACertificateKeyFile      None
-#TLSCACertificateFile          None
-#TLSCACertificatePath          None
-#TLSCARevocationFile           None
-#TLSCARevocationPath           None
-#TLSCertificateChainFile       None
-#TLSDHParamFile                        None
-#TLSLog                                None
-#TLSOptions                    None
-#TLSRandomSeed                 openssl-dir/.rnd
-#TLSRenegotiate                        None
-#TLSRequired                   None
-#TLSTimeoutHandshake           300
-#TLSVerifyClient               None
-#TLSVerifyDepth                        9
+#MultilineRFC2228      on
 
 # Port 21 is the standard FTP port.
 Port                           21
@@ -53,49 +19,46 @@ Umask                               022
 User                           ftp
 Group                          ftp
 
-# use PAM authoritative
-AuthPAM                                on
+# use separate auth files instead of system auth
+#AuthUserFile /etc/ftpd/passwd
+#AuthGroupFile /etc/ftpd/group
 
 # Normally, we want files to be overwriteable.
 <Directory />
        AllowOverwrite          on
 </Directory>
 
-#A basic anonymous configuration
-# uncoment this section below if you want gain annonymous ftp acces
-<Anonymous ~ftp>
-       User                    ftp
-       Group                   ftp
-       AnonRequirePassword     off
-       RequireValidShell       off
+# lock users to their homedir
+DefaultRoot         ~
+
+# allow resume uploads and downloads
+AllowRetrieveRestart on
+AllowStoreRestart on
 
-       # We want clients to be able to login with "anonymous" as well as "ftp"
-       UserAlias               anonymous ftp
+# enable this to have your ftp server FXP gateway.
+# only enable this if you trust your users as it allows your ftp server to connect anywhere.
+# DO NOT enable this if you have anonymous logins enabled!
+#AllowForeignAddress on
 
-       # Limit the maximum number of anonymous logins
-       MaxClients              10
+# NAT support
+# http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-NAT.html
+#MasqueradeAddress my.domain.com
+#PassivePorts 60000 65535
 
-       # We want 'welcome.msg' displayed at login, and '.message' displayed
-       # in each newly chdired directory.
-       DisplayLogin            welcome.msg
-       DisplayFirstChdir       .message
+# Do not announce server software at logon. for paranoids.
+#ServerIdent           off
 
-       AllowStoreRestart on
+# To prevent DoS attacks, set the maximum number of child processes
+# to 30.  If you need to allow more than 30 concurrent connections
+# at once, simply increase this value.  Note that this ONLY works
+# in standalone mode, in inetd mode you should use an inetd server
+# that allows you to limit maximum number of processes per service
+# (such as xinetd).
+MaxInstances           30
 
-       # Limit WRITE everywhere in the anonymous chroot
-       <Limit WRITE>
-               DenyAll
-       </Limit>
+# Idle
+TimeoutLogin           300
+TimeoutNoTransfer      300
 
-#      <Directory /home/services/ftp/pub/Incoming>
-#              <Limit READ>
-#                      DenyAll
-#              </Limit>
-#              <Limit WRITE>
-#                      AllowAll
-#              </Limit>
-#              <Limit STOR>
-#                      AllowAll
-#              </Limit>
-#      </Directory>
-</Anonymous>
+# Load additional (modules) config
+Include /etc/ftpd/conf.d/*.conf