<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[Linux Forum &mdash; Не удаётся настроить proftpd]]></title>
	<link rel="self" href="https://linuxforum.ru/extern.php?action=feed&amp;tid=13513&amp;type=atom" />
	<updated>2011-05-11T13:52:04Z</updated>
	<generator>PunBB</generator>
	<id>https://linuxforum.ru/viewtopic.php?id=13513</id>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=178015#p178015" />
			<content type="html"><![CDATA[<p>вот 100% рабочий конфиг из 15-ой федоры , только что проверил проверяй что не так у тебя ...<br />/etc/proftpd.conf<br /></p><div class="fancy_spoiler_switcher"><div class="fancy_spoiler_switcher_header" data-lang-open="открыть спойлер" data-lang-close="скрыть спойлер"><strong>+</strong>&nbsp;открыть спойлер</div><div class="fancy_spoiler"><p>ServerName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;ProFTPD server&quot;<br />ServerIdent&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on &quot;FTP Server ready.&quot;<br />ServerAdmin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root@localhost<br />DefaultServer&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on</p><p># Cause every FTP user except adm to be chrooted into their home directory<br /># Aliasing /etc/security/pam_env.conf into the chroot allows pam_env to<br /># work at session-end time (<a href="http://bugzilla.redhat.com/477120">http://bugzilla.redhat.com/477120</a>)<br />VRootEngine&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />DefaultRoot&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ~ !adm<br />VRootAlias&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /etc/security/pam_env.conf etc/security/pam_env.conf</p><p># Use pam to authenticate (default) and be authoritative<br />AuthPAMConfig&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; proftpd<br />AuthOrder&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mod_auth_pam.c* mod_auth_unix.c<br /># If you use NIS/YP/LDAP you may need to disable PersistentPasswd<br />#PersistentPasswd&nbsp; &nbsp; &nbsp; &nbsp; off</p><p># Don&#039;t do reverse DNS lookups (hangs on DNS problems)<br />UseReverseDNS&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off</p><p># Set the user and group that the server runs as<br />User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; nobody<br />Group&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; nobody</p><p># To prevent DoS attacks, set the maximum number of child processes<br /># to 20.&nbsp; If you need to allow more than 20 concurrent connections<br /># at once, simply increase this value.&nbsp; Note that this ONLY works<br /># in standalone mode; in inetd mode you should use an inetd server<br /># that allows you to limit maximum number of processes per service<br /># (such as xinetd)<br />MaxInstances&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 20</p><p># Disable sendfile by default since it breaks displaying the download speeds in<br /># ftptop and ftpwho<br />UseSendfile&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off</p><p># Define the log formats<br />LogFormat&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; default&nbsp; &nbsp; &quot;%h %l %u %t \&quot;%r\&quot; %s %b&quot;<br />LogFormat&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; auth&nbsp; &nbsp; &quot;%v [%P] %h %t \&quot;%r\&quot; %s&quot;</p><p>&lt;IfDefine TLS&gt;<br />&nbsp; TLSEngine&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />&nbsp; TLSRequired&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />&nbsp; TLSRSACertificateFile&nbsp; &nbsp; &nbsp; &nbsp; /etc/pki/tls/certs/proftpd.pem<br />&nbsp; TLSRSACertificateKeyFile&nbsp; &nbsp; /etc/pki/tls/certs/proftpd.pem<br />&nbsp; TLSCipherSuite&nbsp; &nbsp; &nbsp; &nbsp; ALL:!ADH:!DES<br />&nbsp; TLSOptions&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; NoCertRequest<br />&nbsp; TLSVerifyClient&nbsp; &nbsp; &nbsp; &nbsp; off<br />&nbsp; #TLSRenegotiate&nbsp; &nbsp; &nbsp; &nbsp; ctrl 3600 data 512000 required off timeout 300<br />&nbsp; TLSLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/tls.log<br />&nbsp; &lt;IfModule mod_tls_shmcache.c&gt;<br />&nbsp; &nbsp; TLSSessionCache&nbsp; &nbsp; &nbsp; &nbsp; shm:/file=/var/run/proftpd/sesscache<br />&nbsp; &lt;/IfModule&gt;<br />&lt;/IfDefine&gt;</p><p># Dynamic ban lists (<a href="http://www.proftpd.org/docs/contrib/mod_ban.html">http://www.proftpd.org/docs/contrib/mod_ban.html</a>)<br /># Enable this with PROFTPD_OPTIONS=-DDYNAMIC_BAN_LISTS in /etc/sysconfig/proftpd<br />&lt;IfDefine DYNAMIC_BAN_LISTS&gt;<br />&nbsp; LoadModule&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mod_ban.c<br />&nbsp; BanEngine&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />&nbsp; BanLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/ban.log<br />&nbsp; BanTable&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/run/proftpd/ban.tab</p><p>&nbsp; # If the same client reaches the MaxLoginAttempts limit 2 times<br />&nbsp; # within 10 minutes, automatically add a ban for that client that<br />&nbsp; # will expire after one hour.<br />&nbsp; BanOnEvent&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; MaxLoginAttempts 2/00:10:00 01:00:00</p><p>&nbsp; # Allow the FTP admin to manually add/remove bans<br />&nbsp; BanControlsACLs&nbsp; &nbsp; &nbsp; &nbsp; all allow user ftpadm<br />&lt;/IfDefine&gt;</p><p># Set networking-specific &quot;Quality of Service&quot; (QoS) bits on the packets used<br /># by the server (contrib/mod_qos.html)<br />&lt;IfDefine QOS&gt;<br />&nbsp; LoadModule&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mod_qos.c<br />&nbsp; # RFC791 TOS parameter compatibility<br />&nbsp; QoSOptions&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; dataqos throughput ctrlqos lowdelay<br />&nbsp; # For a DSCP environment (may require tweaking)<br />&nbsp; #QoSOptions&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; dataqos CS2 ctrlqos AF41<br />&lt;/IfDefine&gt;</p><p># Global Config - config common to Server Config and all virtual hosts<br /># See: <a href="http://www.proftpd.org/docs/howto/Vhost.html">http://www.proftpd.org/docs/howto/Vhost.html</a><br />&lt;Global&gt;</p><p>&nbsp; # Umask 022 is a good standard umask to prevent new dirs and files<br />&nbsp; # from being group and world writable<br />&nbsp; Umask&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 022</p><p>&nbsp; # Allow users to overwrite files and change permissions<br />&nbsp; AllowOverwrite&nbsp; &nbsp; &nbsp; &nbsp; yes<br />&nbsp; &lt;Limit ALL SITE_CHMOD&gt;<br />&nbsp; &nbsp; AllowAll<br />&nbsp; &lt;/Limit&gt;</p><p>&lt;/Global&gt;</p><p># A basic anonymous configuration, with an upload directory<br /># Enable this with PROFTPD_OPTIONS=-DANONYMOUS_FTP in /etc/sysconfig/proftpd<br />&lt;IfDefine ANONYMOUS_FTP&gt;<br />&nbsp; &lt;Anonymous ~ftp&gt;<br />&nbsp; &nbsp; User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ftp<br />&nbsp; &nbsp; Group&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ftp<br />&nbsp; &nbsp; AccessGrantMsg&nbsp; &nbsp; &nbsp; &nbsp; &quot;Anonymous login ok, restrictions apply.&quot;</p><p>&nbsp; &nbsp; # We want clients to be able to login with &quot;anonymous&quot; as well as &quot;ftp&quot;<br />&nbsp; &nbsp; UserAlias&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; anonymous ftp</p><p>&nbsp; &nbsp; # Limit the maximum number of anonymous logins<br />&nbsp; &nbsp; MaxClients&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 10 &quot;Sorry, max %m users -- try again later&quot;</p><p>&nbsp; &nbsp; # Put the user into /pub right after login<br />&nbsp; &nbsp; #DefaultChdir&nbsp; &nbsp; &nbsp; &nbsp; /pub</p><p>&nbsp; &nbsp; # We want &#039;welcome.msg&#039; displayed at login, &#039;.message&#039; displayed in<br />&nbsp; &nbsp; # each newly chdired directory and tell users to read README* files. <br />&nbsp; &nbsp; DisplayLogin&nbsp; &nbsp; &nbsp; &nbsp; /welcome.msg<br />&nbsp; &nbsp; DisplayChdir&nbsp; &nbsp; &nbsp; &nbsp; .message<br />&nbsp; &nbsp; DisplayReadme&nbsp; &nbsp; &nbsp; &nbsp; README*</p><p>&nbsp; &nbsp; # Cosmetic option to make all files appear to be owned by user &quot;ftp&quot;<br />&nbsp; &nbsp; DirFakeUser&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on ftp<br />&nbsp; &nbsp; DirFakeGroup&nbsp; &nbsp; &nbsp; &nbsp; on ftp</p><p>&nbsp; &nbsp; # Limit WRITE everywhere in the anonymous chroot<br />&nbsp; &nbsp; &lt;Limit WRITE SITE_CHMOD&gt;<br />&nbsp; &nbsp; &nbsp; DenyAll<br />&nbsp; &nbsp; &lt;/Limit&gt;</p><p>&nbsp; &nbsp; # An upload directory that allows storing files but not retrieving<br />&nbsp; &nbsp; # or creating directories.<br />&nbsp; &nbsp; &lt;Directory uploads/*&gt;<br />&nbsp; &nbsp; &nbsp; AllowOverwrite&nbsp; &nbsp; &nbsp; &nbsp; no<br />&nbsp; &nbsp; &nbsp; &lt;Limit READ&gt;<br />&nbsp; &nbsp; &nbsp; &nbsp; DenyAll<br />&nbsp; &nbsp; &nbsp; &lt;/Limit&gt;</p><p>&nbsp; &nbsp; &nbsp; &lt;Limit STOR&gt;<br />&nbsp; &nbsp; &nbsp; &nbsp; AllowAll<br />&nbsp; &nbsp; &nbsp; &lt;/Limit&gt;<br />&nbsp; &nbsp; &lt;/Directory&gt;</p><p>&nbsp; &nbsp; # Don&#039;t write anonymous accesses to the system wtmp file (good idea!)<br />&nbsp; &nbsp; WtmpLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off</p><p>&nbsp; &nbsp; # Logging for the anonymous transfers<br />&nbsp; &nbsp; ExtendedLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/access.log WRITE,READ default<br />&nbsp; &nbsp; ExtendedLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/auth.log AUTH auth</p><p>&nbsp; &lt;/Anonymous&gt;<br />&lt;/IfDefine&gt;</p></div></div><p>и там же в /etc должен быть файлик ftpusers вот он :<br />/etc/ftpusers :<br /></p><div class="fancy_spoiler_switcher"><div class="fancy_spoiler_switcher_header" data-lang-open="открыть спойлер" data-lang-close="скрыть спойлер"><strong>+</strong>&nbsp;открыть спойлер</div><div class="fancy_spoiler"><p>root<br />bin<br />daemon<br />adm<br />lp<br />sync<br />shutdown<br />halt<br />mail<br />uucp<br />operator<br />gopher<br />nobody<br />dbus<br />rpc<br />oprofile<br />rpcuser<br />tcpdump<br />avahi<br />gdm<br />mailnull<br />smmsp<br />ntp<br />haldaemon<br />sshd<br />sabayon</p></div></div><p>в такой конфигурации анонимусам вход запрещён , только по авторизации , пускает в домашний каталог , входа в корень нет .</p>]]></content>
			<author>
				<name><![CDATA[gramozeka]]></name>
				<uri>https://linuxforum.ru/profile.php?id=6831</uri>
			</author>
			<updated>2011-05-11T13:52:04Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=178015#p178015</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177973#p177973" />
			<content type="html"><![CDATA[<p>maks chdir(&quot;/home/maks&quot;): Отказано в доступе</p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T12:15:03Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177973#p177973</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177969#p177969" />
			<content type="html"><![CDATA[<p>Ну кодировку-то подбери нормальную.</p>]]></content>
			<author>
				<name><![CDATA[Vascom]]></name>
				<uri>https://linuxforum.ru/profile.php?id=5339</uri>
			</author>
			<updated>2011-05-11T12:12:52Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177969#p177969</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177968#p177968" />
			<content type="html"><![CDATA[<div class="quotebox"><cite>Vascom пишет:</cite><blockquote><p>И логином maks тоже не пускает что ли?<br />Тогда всё же добавь опции для лога или найди лог, он должен писаться.</p></blockquote></div><p>в лога пишет<br /><div class="termtitle" style="font-family: sans-serif; position:relative; height:auto; width:auto; background:#3A4061; color:#FFFFFF; padding: 1px;"><b> Консоль:</b></div>
<div class="termcont" style="font-family: Terminus; position:relative; height:auto; width:auto; overflow-x:scroll; white-space: nowrap ; overflow-y:auto;background:#000000; color:#4EF44E; line-height:1.2; padding: 3px; font-size: 1rem; max-height: 60vh"><br />РњР°Р№ 11 15:54:26 localhost.localdomain proftpd[31695] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): FTP session opened.<br />РњР°Р№ 11 15:54:26 localhost.localdomain proftpd[31695] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): USER anonymous: no such user found from ::ffff:192.168.0.50 [::ffff:192.168.0.50] to ::ffff:192.168.0.1:21<br />РњР°Р№ 11 15:54:26 localhost.localdomain proftpd[31695] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): FTP session closed.<br />РњР°Р№ 11 15:54:26 localhost.localdomain proftpd[31696] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): FTP session opened.<br />РњР°Р№ 11 15:54:33 localhost.localdomain proftpd[31696] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): maks chdir(&quot;/home/maks&quot;): РћС‚РєР°Р·Р°РЅРѕ РІ РґРѕСЃС‚СѓРїРµ<br />РњР°Р№ 11 15:54:33 localhost.localdomain proftpd[31696] 127.0.0.1 (::ffff:192.168.0.50[::ffff:192.168.0.50]): FTP session closed.<br /></div></p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T12:11:26Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177968#p177968</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177956#p177956" />
			<content type="html"><![CDATA[<p>Я не уверен вот эт кусок точно правильно?</p><p> <strong>&nbsp; &nbsp; &nbsp;&lt;Limit READ&gt;<br />&nbsp; &nbsp; &nbsp; &nbsp; DenyAll<br />&nbsp; &nbsp; &nbsp; &lt;/Limit&gt;<br /></strong></p><p>не вижу каких пользователей пускать AllowUser.</p>]]></content>
			<author>
				<name><![CDATA[Kettler]]></name>
				<uri>https://linuxforum.ru/profile.php?id=11719</uri>
			</author>
			<updated>2011-05-11T11:56:24Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177956#p177956</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177955#p177955" />
			<content type="html"><![CDATA[<p>И логином maks тоже не пускает что ли?<br />Тогда всё же добавь опции для лога или найди лог, он должен писаться.</p>]]></content>
			<author>
				<name><![CDATA[Vascom]]></name>
				<uri>https://linuxforum.ru/profile.php?id=5339</uri>
			</author>
			<updated>2011-05-11T11:50:20Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177955#p177955</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177953#p177953" />
			<content type="html"><![CDATA[<p>ls -l<br />drwx------. 23 maks maks 4096&nbsp; 11 14:25 maks</p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T11:48:56Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177953#p177953</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177947#p177947" />
			<content type="html"><![CDATA[<p>Какие права выставлены?</p>]]></content>
			<author>
				<name><![CDATA[Vascom]]></name>
				<uri>https://linuxforum.ru/profile.php?id=5339</uri>
			</author>
			<updated>2011-05-11T11:41:32Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177947#p177947</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177943#p177943" />
			<content type="html"><![CDATA[<div class="quotebox"><cite>Vascom пишет:</cite><blockquote><p>В логах что?<br />Каким пользователем заходишь?</p></blockquote></div><p>логи не пишет <br />заходил пользователями ftp, apache, root(когда в конфиге разрешение прописывал), и обычным ползователем</p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T11:36:02Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177943#p177943</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177942#p177942" />
			<content type="html"><![CDATA[<p>В логах что?<br />Каким пользователем заходишь?</p>]]></content>
			<author>
				<name><![CDATA[Vascom]]></name>
				<uri>https://linuxforum.ru/profile.php?id=5339</uri>
			</author>
			<updated>2011-05-11T11:32:57Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177942#p177942</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177939#p177939" />
			<content type="html"><![CDATA[<div class="codebox"><pre><code># This is the ProFTPD configuration file
#
# See: http://www.proftpd.org/docs/directives/linked/by-name.html

# Server Config - config used for anything outside a &lt;VirtualHost&gt; or &lt;Global&gt; context
# See: http://www.proftpd.org/docs/howto/Vhost.html

ServerName            &quot;ProFTPD server&quot;
ServerIdent            on &quot;FTP Server ready.&quot;
ServerAdmin            root@localhost
DefaultServer            on

# Cause every FTP user except adm to be chrooted into their home directory
# Aliasing /etc/security/pam_env.conf into the chroot allows pam_env to
# work at session-end time (http://bugzilla.redhat.com/477120)
VRootEngine            on
DefaultRoot            ~ !adm
VRootAlias            etc/security/pam_env.conf /etc/security/pam_env.conf

# Use pam to authenticate (default) and be authoritative
AuthPAMConfig            proftpd
AuthOrder            mod_auth_pam.c* mod_auth_unix.c
# If you use NIS/YP/LDAP you may need to disable PersistentPasswd
#PersistentPasswd        off

# Don&#039;t do reverse DNS lookups (hangs on DNS problems)
UseReverseDNS            off

# Set the user and group that the server runs as
User                root
Group                root

# To prevent DoS attacks, set the maximum number of child processes
# to 20.  If you need to allow more than 20 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode; in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances            20

# Disable sendfile by default since it breaks displaying the download speeds in
# ftptop and ftpwho
UseSendfile            off

# Define the log formats
LogFormat            default    &quot;%h %l %u %t \&quot;%r\&quot; %s %b&quot;
LogFormat            auth    &quot;%v [%P] %h %t \&quot;%r\&quot; %s&quot;

# Dynamic Shared Object (DSO) loading
# See README.DSO and howto/DSO.html for more details
#
# General database support (http://www.proftpd.org/docs/contrib/mod_sql.html)
#   LoadModule mod_sql.c
#
# Support for base-64 or hex encoded MD5 and SHA1 passwords from SQL tables
# (contrib/mod_sql_passwd.html)
#   LoadModule mod_sql_passwd.c
#
# Mysql support (requires proftpd-mysql package)
# (http://www.proftpd.org/docs/contrib/mod_sql.html)
#   LoadModule mod_sql_mysql.c
#
# Postgresql support (requires proftpd-postgresql package)
# (http://www.proftpd.org/docs/contrib/mod_sql.html)
#   LoadModule mod_sql_postgres.c
#
# Quota support (http://www.proftpd.org/docs/contrib/mod_quotatab.html)
#   LoadModule mod_quotatab.c
#
# File-specific &quot;driver&quot; for storing quota table information in files
# (http://www.proftpd.org/docs/contrib/mod_quotatab_file.html)
#   LoadModule mod_quotatab_file.c
#
# SQL database &quot;driver&quot; for storing quota table information in SQL tables
# (http://www.proftpd.org/docs/contrib/mod_quotatab_sql.html)
#   LoadModule mod_quotatab_sql.c
#
# LDAP support (requires proftpd-ldap package)
# (http://www.proftpd.org/docs/directives/linked/config_ref_mod_ldap.html)
#   LoadModule mod_ldap.c
#
# LDAP quota support (requires proftpd-ldap package)
# (http://www.proftpd.org/docs/contrib/mod_quotatab_ldap.html)
#   LoadModule mod_quotatab_ldap.c
#
# Support for authenticating users using the RADIUS protocol
# (http://www.proftpd.org/docs/contrib/mod_radius.html)
#   LoadModule mod_radius.c
#
# Retrieve quota limit table information from a RADIUS server
# (http://www.proftpd.org/docs/contrib/mod_quotatab_radius.html)
#   LoadModule mod_quotatab_radius.c
#
# Administrative control actions for the ftpdctl program
# (http://www.proftpd.org/docs/contrib/mod_ctrls_admin.html)
#   LoadModule mod_ctrls_admin.c
#
# Execute external programs or scripts at various points in the process
# of handling FTP commands
# (http://www.castaglia.org/proftpd/modules/mod_exec.html)
#   LoadModule mod_exec.c
#
# Support for POSIX ACLs
# (http://www.proftpd.org/docs/modules/mod_facl.html)
#   LoadModule mod_facl.c
#
# Support for using the GeoIP library to look up geographical information on
# the connecting client and using that to set access controls for the server
# (http://www.castaglia.org/proftpd/modules/mod_geoip.html)
#   LoadModule mod_geoip.c
#
# Configure server availability based on system load
# (http://www.proftpd.org/docs/contrib/mod_load.html)
#   LoadModule mod_load.c
#
# Limit downloads to a multiple of upload volume (see README.ratio)
#   LoadModule mod_ratio.c
#
# Rewrite FTP commands sent by clients on-the-fly,
# using regular expression matching and substitution 
# (http://www.proftpd.org/docs/contrib/mod_rewrite.html)
#   LoadModule mod_rewrite.c
#
# Support for the SSH2, SFTP, and SCP protocols, for secure file transfer over
# an SSH2 connection (http://www.castaglia.org/proftpd/modules/mod_sftp.html)
#   LoadModule mod_sftp.c
#
# Use PAM to provide a &#039;keyboard-interactive&#039; SSH2 authentication method for
# mod_sftp (http://www.castaglia.org/proftpd/modules/mod_sftp_pam.html)
#   LoadModule mod_sftp_pam.c
#
# Use SQL (via mod_sql) for looking up authorized SSH2 public keys for user
# and host based authentication
# (http://www.castaglia.org/proftpd/modules/mod_sftp_sql.html)
#   LoadModule mod_sftp_sql.c
#
# Provide data transfer rate &quot;shaping&quot; across the entire server
# (http://www.castaglia.org/proftpd/modules/mod_shaper.html)
#   LoadModule mod_shaper.c
#
# Support for miscellaneous SITE commands such as SITE MKDIR, SITE SYMLINK,
# and SITE UTIME (http://www.proftpd.org/docs/contrib/mod_site_misc.html)
#   LoadModule mod_site_misc.c
#
# Provide an external SSL session cache using shared memory
# (contrib/mod_tls_shmcache.html)
#   LoadModule mod_tls_shmcache.c
#
# Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny
# files, for IP-based access control
# (http://www.proftpd.org/docs/contrib/mod_wrap.html)
#   LoadModule mod_wrap.c
#
# Use the /etc/hosts.allow and /etc/hosts.deny files, or other allow/deny
# files, as well as SQL-based access rules, for IP-based access control
# (http://www.proftpd.org/docs/contrib/mod_wrap2.html)
#   LoadModule mod_wrap2.c
#
# Support module for mod_wrap2 that handles access rules stored in specially
# formatted files on disk
# (http://www.proftpd.org/docs/contrib/mod_wrap2_file.html)
#   LoadModule mod_wrap2_file.c
#
# Support module for mod_wrap2 that handles access rules stored in SQL
# database tables (http://www.proftpd.org/docs/contrib/mod_wrap2_sql.html)
#   LoadModule mod_wrap2_sql.c
#
# Provide a flexible way of specifying that certain configuration directives
# only apply to certain sessions, based on credentials such as connection
# class, user, or group membership
# (http://www.proftpd.org/docs/contrib/mod_ifsession.html)
#   LoadModule mod_ifsession.c

# TLS (http://www.castaglia.org/proftpd/modules/mod_tls.html)
&lt;IfDefine TLS&gt;
  TLSEngine            on
  TLSRequired            on
  TLSRSACertificateFile        /etc/pki/tls/certs/proftpd.pem
  TLSRSACertificateKeyFile    /etc/pki/tls/certs/proftpd.pem
  TLSCipherSuite        ALL:!ADH:!DES
  TLSOptions            NoCertRequest
  TLSVerifyClient        off
  #TLSRenegotiate        ctrl 3600 data 512000 required off timeout 300
  TLSLog            /var/log/proftpd/tls.log
  &lt;IfModule mod_tls_shmcache.c&gt;
    TLSSessionCache        shm:/file=/var/run/proftpd/sesscache
  &lt;/IfModule&gt;
&lt;/IfDefine&gt;

# Dynamic ban lists (http://www.proftpd.org/docs/contrib/mod_ban.html)
# Enable this with PROFTPD_OPTIONS=-DDYNAMIC_BAN_LISTS in /etc/sysconfig/proftpd
&lt;IfDefine DYNAMIC_BAN_LISTS&gt;
  LoadModule            mod_ban.c
  BanEngine            on
  BanLog            /var/log/proftpd/ban.log
  BanTable            /var/run/proftpd/ban.tab

  # If the same client reaches the MaxLoginAttempts limit 2 times
  # within 10 minutes, automatically add a ban for that client that
  # will expire after one hour.
  BanOnEvent            MaxLoginAttempts 2/00:10:00 01:00:00

  # Allow the FTP admin to manually add/remove bans
  BanControlsACLs        all allow user ftpadm
&lt;/IfDefine&gt;

# Global Config - config common to Server Config and all virtual hosts
# See: http://www.proftpd.org/docs/howto/Vhost.html
&lt;Global&gt;

  # Umask 022 is a good standard umask to prevent new dirs and files
  # from being group and world writable
  Umask                022

  # Allow users to overwrite files and change permissions
  AllowOverwrite        yes
  &lt;Limit ALL SITE_CHMOD&gt;
AllowAll 
  &lt;/Limit&gt;
UseFtpUsers off

&lt;/Global&gt;

# A basic anonymous configuration, with an upload directory
# Enable this with PROFTPD_OPTIONS=-DANONYMOUS_FTP in /etc/sysconfig/proftpd
&lt;IfDefine ANONYMOUS_FTP&gt;
  &lt;Anonymous ~ftp&gt;
    User            ftp
    Group            ftp
    AccessGrantMsg        &quot;Anonymous login ok, restrictions apply.&quot;

    # We want clients to be able to login with &quot;anonymous&quot; as well as &quot;ftp&quot;
    UserAlias            anonymous ftp

    # Limit the maximum number of anonymous logins
    MaxClients            10 &quot;Sorry, max %m users -- try again later&quot;

    # Put the user into /pub right after login
    #DefaultChdir        /pub

    # We want &#039;welcome.msg&#039; displayed at login, &#039;.message&#039; displayed in
    # each newly chdired directory and tell users to read README* files. 
    DisplayLogin        /welcome.msg
    DisplayChdir        .message
    DisplayReadme        README*

    # Cosmetic option to make all files appear to be owned by user &quot;ftp&quot;
    DirFakeUser            on ftp
    DirFakeGroup        on ftp

    # Limit WRITE everywhere in the anonymous chroot
    &lt;Limit WRITE SITE_CHMOD&gt;
      DenyAll
    &lt;/Limit&gt;

    # An upload directory that allows storing files but not retrieving
    # or creating directories.
    &lt;Directory uploads/*&gt;
      AllowOverwrite        no
      &lt;Limit READ&gt;
        DenyAll
      &lt;/Limit&gt;

      &lt;Limit STOR&gt;
        AllowAll
      &lt;/Limit&gt;
    &lt;/Directory&gt;

    # Don&#039;t write anonymous accesses to the system wtmp file (good idea!)
    WtmpLog            off

    # Logging for the anonymous transfers
    ExtendedLog            /var/log/proftpd/access.log WRITE,READ default
    ExtendedLog            /var/log/proftpd/auth.log AUTH auth

  &lt;/Anonymous&gt;
&lt;/IfDefine&gt;</code></pre></div><p>в корневой каталог пускает, а в пупку пользователя нет, пишет ошибка 550</p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T11:31:19Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177939#p177939</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177935#p177935" />
			<content type="html"><![CDATA[<p>В какие &quot;не вовсе&quot;? Конфиг в студию.</p>]]></content>
			<author>
				<name><![CDATA[Vascom]]></name>
				<uri>https://linuxforum.ru/profile.php?id=5339</uri>
			</author>
			<updated>2011-05-11T11:26:18Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177935#p177935</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Не удаётся настроить proftpd]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=177933#p177933" />
			<content type="html"><![CDATA[<p>Fedora 14<br />Сейчас стоят стандартные настройки пускает не во все папки хотя право вроде выставлены верно</p>]]></content>
			<author>
				<name><![CDATA[makmak]]></name>
				<uri>https://linuxforum.ru/profile.php?id=9100</uri>
			</author>
			<updated>2011-05-11T11:25:04Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=177933#p177933</id>
		</entry>
</feed>
