proftpd - zablokowanie usera w katalogu

djsolar - 09-05-2007 21:24
w slacku dzialalo mi

DefaultRoot ~ w ETCH niestety nie chce jakos....

a nie chce aby userzy "lazili" mi po calym ssystemie

Hunt - 10-05-2007 09:34
a przed Default Root ~ masz zapis
DenyFilter \*.*/
??

djsolar - 10-05-2007 10:13
# This is a basic ProFTPD configuration file.
# It establishes a single server and a single anonymous login.
# It assumes that you have a user/group "nobody" and "ftp"
# for normal/anonymous operation.

ServerName "FTP Server "

ServerType standalone
#ServerType inetd
DefaultServer on
DefaultRoot ~
#DisplayConnect /etc/proftpd/message.net
# Port 21 is the standard FTP port.
Port 21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

# Set the user and group that the server normally runs at.
User nobody
Group nogroup

# This next option is required for NIS or NIS+ to work properly:
#PersistentPasswd off

SystemLog /var/log/proftpd.log
TransferLog /var/log/xferlog

# Normally, we want files to be overwriteable.
<Directory /*>
AllowOverwrite on

TransferRate RETR 500000:0

TransferRate STOR 500000:0

TransferRate STOU 500000:0

TransferRate APPE 500000:0

</Directory>

# A basic anonymous FTP server configuration.
# To enable this, remove the user ftp from /etc/ftpusers.
<Anonymous ~ftp>
RequireValidShell off
User ftp
Group ftp
# We want clients to be able to login with "anonymous" as well as "ftp"
UserAlias anonymous ftp

# Limit the maximum number of anonymous logins
MaxClients 10

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>

# An upload directory that allows storing files but not retrieving
# or creating directories.
# <Directory incoming/*>
# <Limit READ>
# DenyAll
# </Limit>
#
# <Limit STOR>
# AllowAll
# </Limit>
# </Directory>

</Anonymous>

chyl-o - 11-05-2007 19:48
czy masz załadowany moduł mod_auth?

kat - 29-07-2007 10:38
Nie prościj zajnstalować vsftpd, mały lekki i bezpieczny
chroot_local_user=YES