Administrace komentářů

# **********************************************************************
# ***  /etc/proftpd.conf -- Toto je konfiguracni soubor ProFTPD.     ***
# ***  Pro aplikaci zmen nezapomente restartovat ProFTPD.            ***
# **********************************************************************

#Jmeno serveru
 ServerName                      "xxxx FTP"
#Definuje jestli se server bude sam starat o prichozi spojeni (standalone)
#nebo to přenechá demonovi inetd
 ServerType                     standalone
#
 ServerIdent                    on "xxxx FTP"
#Zabranuje zobrazeni hlasky dokus se uzivatel neprihlasi
 DeferWelcome                   on
 MultilineRFC2228               on
 DefaultServer                  on
 DefaultRoot                    ~
# Zobrazovat symbolicke odkazy ano nebo ne (on|off)
 ShowSymlinks                   on
#Maximalni casovy usek mezi prihlasenim a libovolnym prikazem
 TimeoutNoTransfer              600
#Maximálni casovy usek exitujicího spojeni bez prenaseni dat
 TimeoutStalled                 600
#Maximalni doba necinosti klienta
 TimeoutIdle                    1200
#Uvitaci hlaska
#DisplayLogin                    .welcome.msg
#DisplayFirstChdir               .message
 ListOptions                    "-l"
DenyFilter                      \*.*/
# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd               off
# Uncomment this if you would use TLS module:
#TLSEngine                      on
# Uncomment this if you would use quota module:
#Quotas                         on
# Uncomment this if you would use ratio module:
#Ratios                         on
# Cislo portu, ktery server bude pouzivat.
 Port                           xxxxx
# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
 MaxInstances                   50
# Jmeno uzivatele a skupina, pod kterym pobezi server.
 User                           nobody
 Group                          nogroup
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask                           022  022
# Normally, we want files to be overwriteable.
AllowOverwrite                  on

# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default. 
#DelayEngine                    off

#  ***********************
#  ****  LIMIT LOGIN  ****
#  ***********************

<Limit LOGIN>
        Allow   from 127.0.0.1, xxx.xxx.xxx.xxx, 192.168.xxx.xxx
#       Allow   from all
        Deny    from all
</Limit>

#  ***********************
#  ****   ANONYMOUS   ****
#  ***********************

<Anonymous ~ftp>
   User                         ftp
   Group                        nogroup
   # Chceme, aby 'anonymous' bylo to samé jako 'ftp'
   UserAlias                    anonymous ftp
   # Cosmetic changes, all files belongs to ftp user
   DirFakeUser  on ftp
   DirFakeGroup on ftp
   RequireValidShell            off
   # Limit paraelniho poctu pripojeni tohoto uzivatele
   MaxClients                   10
   # We want 'welcome.msg' displayed at login, and '.message' displayed
   # in each newly chdired directory.
   #DisplayLogin                welcome.msg
   DisplayFirstChdir            .message
   # Limit WRITE everywhere in the anonymous chroot
   <Directory *>
     <Limit WRITE>
       AllowAll
#       DenyAll
     </Limit>
   </Directory>
 
</Anonymous>