
ServerName                      " ftp server"
ServerType                      standalone
DefaultServer                   on
ServerIdent                     on      "FTP"

ServerAdmin                     admin@server.sk

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
#Umask                          022

# To prevent DoS attacks, set the maximum number of child processes
MaxInstances                    30

# Set the user and group under which the server will run.
User                            proftpd
Group                           proftpd

RootLogin off

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~

DefaultRoot /home/ftp
AllowOverwrite on

# Normally, we want files to be overwriteable.
<Directory />
 UserOwner      ftp_user
 GroupOwner     ftp_group
 Umask  0027
 AllowOverwrite         on
</Directory>

<Limit LOGIN>
 Order  allow,deny
 Allow from 10.10.10.10
 Deny from all
/Limit>

<Limit All>
 Order allow,deny
 AllowUser      ftp_user
 DenyUser       All
</Limit>

<IfModule mod_delay.c>
  DelayEngine off
</IfModule>

ServerLog       /usr/local/var/logs/proftpd.log
ScoreboardFile  /usr/local/var/logs/proftpd.scoreboard
TransferLog     /usr/local/var/logs/proftp.log
LogFormat                                       default "%h %l %u %t \"%r\" %s %b"
LogFormat                                       auth    "%v [%P] %h %t \"%r\" %s"
LogFormat                                       write   "%h %l %u %t \"%r\" %s %b"
ExtendedLog                                     /usr/local/var/logs/proftpd-access.log WRITE,READ write
ExtendedLog                                     /usr/local/var/logs/proftpd-auth.log AUTH auth

<IfModule mod_tls.c>
TLSEngine on 
TLSRequired     on
TLSLog /usr/local/var/logs/tls.log 
TLSProtocol SSLv23 
TLSOptions AllowDotLogin
TLSRSACertificateFile /usr/local/etc/ssl/certs/cert.pem
TLSRSACertificateKeyFile /usr/local/etc/ssl/certs/key.pem 
#TLSCACertificateFile /usr/local/etc/ssl/certs/srv.ca.crt
TLSVerifyClient off
</IfModule>

