Linux server application learning 2-FTP service continued

#global can also, if you set a plurality of virtual sites after setting up

Identlookups Off # Connects to Something and Back Usereverseedns

Requirevalidshell Off # Anonymous generally need to add this

MaxLoginattempts 1 # Anonymity 1 is OK, maximum password verification

WTMPLOG NONE # does not remember LOG to WTMP

Denyfilter /*.*/|.ftpaccess #denyfilter makes some filtering, regular expressions

# Dylefilter ~! `/ ** /?, $ @ # According to yourself, the above is bad: P

#Lsdefaultoptions "-l" #LS parameters

#Allowforeignaddress ON # To allow FXP to write to ON

CommandBuffersize 128 # Maximum command length

Dirfakeuser on ftp # does not display the real user, group

Dirfakegroup ON FTP

Deferwelcome ON # Show Welcome Information

Pathdenyfilter "(^ /. Ftpaccess $)" # with Denyfilter filter

User Nobody #proftpd which user, group is running

Group nobody

TimeSGMT Off # Time

Denyall

# for some consideration, start ban, and then turn it back later. READ can also be added ...

# You can also set the network segment login that allows the connection here, or it is recommended to use a firewall.

Ignorehidden on

HidenoAccess ON

ALLOWOVERWRITE OFF # No rewrite overlays, then open the allowable resume

#AllowRetrieverest The default is ON or written

ServerName "FTP Server"

Servertype Standalone # can also use inetd xinetd

ServerIdent on "Welcome to FTP" # is displayed to the user before authentication, or files available, here

DefaultServer on

UsereverseDns Off # speeds up the connection speed

Port 21 # ftp port

Umask 022 # Mask For easy management 002

Passiveports 20000 30000 # Passive mode port segment

SYSTEMLOG / VAR / PrOFTPD / SYSLOG #LOG pay attention to themselves plus logrotate configuration

MaxInstances 250 # Max

TimeOutlogin 30 # Authentication timeout

TimeOutidle 120 # Timeout

TimeoutNotransfer 300 # No data transfer timeout

#TimeOutstalled 300

#LOG Some custom formats, adjust or use the default as needed

Logformat myxfer "% h% u% t /"% r / "% s% B"

Logformat default "% H% a% u% T /"% r / "% s% b $$ / '% f /'"

Logformat Auth "% h% a% t /"% r / "% s"

Logformat Write "% H% a% T /"% r / "% s% b" # Anonymous root directory remember to set the corresponding directory permissions, FTP users should have at least R x permissions

User FTP

GROUP FTPADMIN

Umask 002

Useralias anonymous ftp

MaxClients 50 "Guest (% M)" # 人 多 多 提 提 信息, you can use some variables

#Ratereadbps 500000 # Speed ​​speed

MaxClientSperHost 2 "Multi-connection" # A number of connections for IP

Transferlog None #log

ExtendedLog / Var/proftpd/upload.log Write Myxfer #log

Extendedlog /var/proftpd/download.log read myxfer #log

DisplayLogin etc / welcome # Welcome files, you can use some variables

DisplayFirstChdir .Message # Change the message displayed when the directory

Authaliaasonly On # Only allows usralias only allows an Anonymous not allowed FTP

ALOWALL

# Opens the allowable connection, which can be the network segment allowed to access, recommended firewall

ALLOWSTORERESTART ON # Allows the upload directory, can be resumed, can not overwrite

ALOWALL

# If you don't want to download, only let upload can be added

# Denyall

# This is almost over, each directory can write .ftpaccess setting permissions

# Back these two can be referred to as needed

# In the FTP root directory, let's put the welcome information in the top, of course, can be made

Denyall

#Limits a specific IP segment can be seen, or set in the directory .ftpaccess

ORDER DENY, ALOW

Allow from 166.111.

# 到 这 这 就

# 加帐 密号 用, password file, database, etc.

# If you use the system's account, you can use the default to limit the active directory, such as blocking the TA at home ~

# There are other many other things to see the documentation, such as open multilinerfc2228, etc.

#

# Remember to set the corresponding directory permissions, r x is less

# Remember to set file privileges (chmod / chown) configuration .ftpaccess

# You should learn about commands such as LS RM Chmod Chown Find Xargs crontab for simple management.

# kill / killall -hup or with script ftpshut ftpwho

#RM -F / etc / shutmsg

# There are still many corresponding auxiliary tools, or you can write scripts yourself.

ALOWALL

ALLOWGROUP CAN-UP

Denyall

Up is an upload directory, a CAN-UP group: A group that can upload, where users can upload and download. It is not that the group cannot be uploaded.

It should be the case, only for individual users can upload download, other users can only download.

ALOWALL

Allowuser User1

Allowuser User2

Denyall

One can only be on (user2), one can only (user1).

Allowuser User1

Denyuser User2

Allowuser User2

Denyall