BSD/Unix(g) proftpd oppsett

[alexander86]

Driver og setter opp en ftp server, og sliter med og få tilgang

 

vil også ha shh/tls samt fxp

 

ServerType standalone

DefaultServer on

Umask 022

ServerName "what.ever.com xxx.xxx.xxx.xxx"

ServerIdent on "Roger"

ServerAdmin [email protected]

IdentLookups off

UseReverseDNS off

Port 21212

PassivePorts 40402 40403

#MasqueradeAddress None

TimesGMT on

MaxInstances 30

MaxLoginAttempts 3

TimeoutLogin 300

TimeoutNoTransfer 120

TimeoutIdle 120

DisplayLogin welcome.msg

User nobody

Group nobody

DirFakeUser off Roger

DirFakeGroup off nobody

DefaultTransferMode binary

AllowForeignAddress on

AllowRetrieveRestart on

AllowStoreRestart on

DeleteAbortedStores off

TransferRate RETR 16000

TransferRate STOR 3200

TransferRate STOU 3200

TransferRate APPE 3200

SystemLog /var/log/secure

RequireValidShell off

#gp_random_username_length 6

#gp_random_password_length 10

#gp_randomize_case lower

#gp_useradd_homedir_path /home/ftp

#gp_html_path /var/www/html/ftp.htm

#gp_welcome_name welcome.msg

<IfModule mod_tls.c>

TLSEngine on

TLSRequired on

TLSVerifyClient on

TLSProtocol TLSv1

TLSLog /var/log/proftpd_tls.log

TLSRSACertificateFile /etc/gproftpd/gproftpd.pem

</IfModule>

<IfModule mod_ratio.c>

Ratios on

SaveRatios on

RatioFile "/restricted/proftpd_ratios"

RatioTempFile "/restricted/proftpd_ratios_temp"

CwdRatioMsg "Please upload first!"

FileRatioErrMsg "FileRatio limit exceeded, upload something first..."

ByteRatioErrMsg "ByteRatio limit exceeded, upload something first..."

LeechRatioMsg "Your ratio is unlimited."

</IfModule>

<Limit LOGIN>

AllowUser Test

DenyALL

</Limit>

 

<Anonymous /home/ftp/downloads>

User Test

Group user

AnonRequirePassword on

MaxClients 5 "The server is full, hosting %m users"

DisplayLogin welcome.msg

<Limit LOGIN>

Allow from all

Deny from all

</Limit>

AllowOverwrite off

AllowOverwrite on

<Limit LIST NLST STOR STOU APPE RETR RNFR RNTO DELE MKD XMKD SITE_MKDIR RMD XRMD SITE_RMDIR SITE SITE_CHMOD SITE_CHGRP MTDM PWD XPWD SIZE STAT CWD XCWD CDUP XCUP >

AllowAll

</Limit>

<Limit NOTHING >

DenyAll

</Limit>

</Anonymous>

 

<IfModule mod_tls.c>

TLSEngine on

TLSLog /var/ftpd/tls.log

TLSProtocol TLSv1

# Are clients required to use FTP over TLS when talking to this server?

TLSRequired on

# Server's certificate

TLSRSACertificateFile /etc/ftpcert/server.crt

TLSRSACertificateKeyFile /etc/ftpcert/server.key

# CA the server trusts

TLSCACertificateFile /etc/ftpcert/ca.crt

# Authenticate clients that want to use FTP over TLS?

TLSVerifyClient off

</IfModule>

 

<IfModule mod_tls.c>

TLSEngine on

TLSLog /var/ftpd/tls.log

TLSProtocol TLSv1

 

# Are clients required to use FTP over TLS when talking to this server?

TLSRequired off

 

# Server's certificate

TLSRSACertificateFile /etc/ftpd/server.cert.pem

TLSRSACertificateKeyFile /etc/ftpd/server.key.pem

 

# CA the server trusts

TLSCACertificateFile /etc/ftpd/root.cert.pem

 

# Authenticate clients that want to use FTP over TLS?

TLSVerifyClient off

 

# Allow SSL/TLS renegotiations when the client requests them, but

# do not force the renegotations. Some clients do not support

# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these

# clients will close the data connection, or there will be a timeout

# on an idle data connection.

TLSRenegotiate required off

 

</IfModule>

[twhoffma]

bare litt nysgjerrig - hvilket os er det du prøver å sette dette opp i? Er det noen spesielle ting du trenger i proftpd?

 

Grunnen til at jeg spør er fordi ihvertfall de fleste av bsd'ene har ftpd i basesystemet, som fungerte out of the box for meg.

 

//Torgeir

[Zerge]

Jeg svarer heller ikke helt på spørsmålet, men med pure-ftpd kan du lett sette opp de tilleggene du nevner (TLS/FXP).