| commit | author | age | ||
| 7d89f5 | 1 | |
| T | 2 | ############################################################ |
| 3 | # # | |
| 4 | # Configuration file for pure-ftpd wrappers # | |
| 5 | # # | |
| 6 | ############################################################ | |
| 7 | ||
| 8 | # If you want to run Pure-FTPd with this configuration | |
| 9 | # instead of command-line options, please run the | |
| 10 | # following command : | |
| 11 | # | |
| 12 | # /usr/sbin/pure-config.pl /usr/etc/pure-ftpd.conf | |
| 13 | # | |
| 14 | # Please don't forget to have a look at documentation at | |
| 15 | # http://www.pureftpd.org/documentation.shtml for a complete list of | |
| 16 | # options. | |
| 17 | ||
| 18 | # Cage in every user in his home directory | |
| 19 | ||
| 20 | ChrootEveryone yes | |
| 21 | ||
| 22 | ||
| 23 | ||
| 24 | # If the previous option is set to "no", members of the following group | |
| 25 | # won't be caged. Others will be. If you don't want chroot()ing anyone, | |
| 26 | # just comment out ChrootEveryone and TrustedGID. | |
| 27 | ||
| 28 | # TrustedGID 100 | |
| 29 | ||
| 30 | ||
| 31 | ||
| 32 | # Turn on compatibility hacks for broken clients | |
| 33 | ||
| 34 | BrokenClientsCompatibility no | |
| 35 | ||
| 36 | ||
| 37 | ||
| 38 | # Maximum number of simultaneous users | |
| 39 | ||
| 40 | MaxClientsNumber 10 | |
| 41 | ||
| 42 | ||
| 43 | ||
| 44 | # Fork in background | |
| 45 | ||
| fa5734 | 46 | #Daemonize yes |
| TB | 47 | Daemonize no |
| 7d89f5 | 48 | |
| T | 49 | |
| 50 | ||
| 51 | # Maximum number of sim clients with the same IP address | |
| 52 | ||
| 53 | MaxClientsPerIP 3 | |
| 54 | ||
| 55 | ||
| 56 | ||
| 57 | # If you want to log all client commands, set this to "yes". | |
| 58 | # This directive can be duplicated to also log server responses. | |
| 59 | ||
| 60 | VerboseLog no | |
| 61 | ||
| 62 | ||
| 63 | # Allow dot-files | |
| 64 | AllowDotFiles yes | |
| 65 | ||
| 66 | ||
| 67 | # List dot-files even when the client doesn't send "-a". | |
| 68 | ||
| 69 | DisplayDotFiles yes | |
| 70 | ||
| 71 | ||
| 72 | ||
| 73 | # Don't allow authenticated users - have a public anonymous FTP only. | |
| 74 | ||
| 75 | AnonymousOnly no | |
| 76 | ||
| 77 | ||
| 78 | ||
| 79 | # Disallow anonymous connections. Only allow authenticated users. | |
| 80 | ||
| 81 | NoAnonymous yes | |
| 82 | ||
| 83 | ||
| 84 | ||
| 85 | # Syslog facility (auth, authpriv, daemon, ftp, security, user, local*) | |
| 86 | # The default facility is "ftp". "none" disables logging. | |
| 87 | ||
| 88 | SyslogFacility ftp | |
| 89 | ||
| 90 | ||
| 91 | ||
| 92 | # Display fortune cookies | |
| 93 | ||
| 94 | # FortunesFile /usr/share/fortune/zippy | |
| 95 | ||
| 96 | ||
| 97 | ||
| 98 | # Don't resolve host names in log files. Logs are less verbose, but | |
| 99 | # it uses less bandwidth. Set this to "yes" on very busy servers or | |
| 100 | # if you don't have a working DNS. | |
| 101 | ||
| 102 | DontResolve yes | |
| 103 | ||
| 104 | ||
| 105 | ||
| 106 | # Maximum idle time in minutes (default = 15 minutes) | |
| 107 | ||
| 108 | MaxIdleTime 15 | |
| 109 | ||
| 110 | ||
| 111 | ||
| 112 | # LDAP configuration file (see README.LDAP) | |
| 113 | ||
| 114 | # LDAPConfigFile /etc/pure-ftpd/pureftpd-ldap.conf | |
| 115 | ||
| 116 | ||
| 117 | ||
| 118 | # MySQL configuration file (see README.MySQL) | |
| 119 | ||
| 120 | MySQLConfigFile /etc/pure-ftpd/db/mysql.conf | |
| 121 | ||
| 122 | ||
| 123 | # Postgres configuration file (see README.PGSQL) | |
| 124 | ||
| 125 | # PGSQLConfigFile /etc/pure-ftpd/pureftpd-pgsql.conf | |
| 126 | ||
| 127 | ||
| 128 | # PureDB user database (see README.Virtual-Users) | |
| 129 | ||
| 130 | # PureDB /etc/pure-ftpd/pureftpd.pdb | |
| 131 | ||
| 132 | ||
| 133 | # Path to pure-authd socket (see README.Authentication-Modules) | |
| 134 | ||
| 135 | # ExtAuth /var/run/ftpd.sock | |
| 136 | ||
| 137 | ||
| 138 | ||
| 139 | # If you want to enable PAM authentication, uncomment the following line | |
| 140 | ||
| 141 | # PAMAuthentication yes | |
| 142 | ||
| 143 | ||
| 144 | ||
| 145 | # If you want simple Unix (/etc/passwd) authentication, uncomment this | |
| 146 | ||
| 147 | # UnixAuthentication yes | |
| 148 | ||
| 149 | ||
| 150 | ||
| 151 | # Please note that LDAPConfigFile, MySQLConfigFile, PAMAuthentication and | |
| 152 | # UnixAuthentication can be used only once, but they can be combined | |
| 153 | # together. For instance, if you use MySQLConfigFile, then UnixAuthentication, | |
| 154 | # the SQL server will be asked. If the SQL authentication fails because the | |
| 155 | # user wasn't found, another try # will be done with /etc/passwd and | |
| 156 | # /etc/shadow. If the SQL authentication fails because the password was wrong, | |
| 157 | # the authentication chain stops here. Authentication methods are chained in | |
| 158 | # the order they are given. | |
| 159 | ||
| 160 | ||
| 161 | ||
| 162 | # 'ls' recursion limits. The first argument is the maximum number of | |
| 163 | # files to be displayed. The second one is the max subdirectories depth | |
| 164 | ||
| 165 | LimitRecursion 2000 8 | |
| 166 | ||
| 167 | ||
| 168 | ||
| 169 | # Are anonymous users allowed to create new directories ? | |
| 170 | ||
| 171 | AnonymousCanCreateDirs no | |
| 172 | ||
| 173 | ||
| 174 | ||
| 175 | # If the system is more loaded than the following value, | |
| 176 | # anonymous users aren't allowed to download. | |
| 177 | ||
| 178 | MaxLoad 4 | |
| 179 | ||
| 180 | ||
| 181 | ||
| 182 | # Port range for passive connections replies. - for firewalling. | |
| 183 | ||
| 184 | # PassivePortRange 30000 50000 | |
| 185 | ||
| 186 | ||
| 187 | ||
| 188 | # Force an IP address in PASV/EPSV/SPSV replies. - for NAT. | |
| 189 | # Symbolic host names are also accepted for gateways with dynamic IP | |
| 190 | # addresses. | |
| 191 | ||
| 192 | # ForcePassiveIP 192.168.0.1 | |
| 193 | ||
| 194 | ||
| 195 | ||
| 196 | # Upload/download ratio for anonymous users. | |
| 197 | ||
| 198 | # AnonymousRatio 1 10 | |
| 199 | ||
| 200 | ||
| 201 | ||
| 202 | # Upload/download ratio for all users. | |
| 203 | # This directive superscedes the previous one. | |
| 204 | ||
| 205 | # UserRatio 1 10 | |
| 206 | ||
| 207 | ||
| 208 | ||
| 209 | # Disallow downloading of files owned by "ftp", ie. | |
| 210 | # files that were uploaded but not validated by a local admin. | |
| 211 | ||
| 212 | AntiWarez yes | |
| 213 | ||
| 214 | ||
| 215 | ||
| 216 | # IP address/port to listen to (default=all IP and port 21). | |
| 217 | ||
| 218 | # Bind 127.0.0.1,21 | |
| 219 | ||
| 220 | ||
| 221 | ||
| 222 | # Maximum bandwidth for anonymous users in KB/s | |
| 223 | ||
| 224 | # AnonymousBandwidth 8 | |
| 225 | ||
| 226 | ||
| 227 | ||
| 228 | # Maximum bandwidth for *all* users (including anonymous) in KB/s | |
| 229 | # Use AnonymousBandwidth *or* UserBandwidth, both makes no sense. | |
| 230 | ||
| 231 | # UserBandwidth 8 | |
| 232 | ||
| 233 | ||
| 234 | ||
| 235 | # File creation mask. <umask for files>:<umask for dirs> . | |
| 236 | # 177:077 if you feel paranoid. | |
| 237 | ||
| 0ec1ad | 238 | Umask 133:022 |
| 7d89f5 | 239 | |
| T | 240 | |
| 241 | ||
| 242 | # Minimum UID for an authenticated user to log in. | |
| 243 | ||
| 244 | MinUID 40 | |
| 245 | ||
| 246 | ||
| 247 | ||
| 248 | # Allow FXP transfers for authenticated users. | |
| 249 | ||
| 250 | AllowUserFXP no | |
| 251 | ||
| 252 | ||
| 253 | ||
| 254 | # Allow anonymous FXP for anonymous and non-anonymous users. | |
| 255 | ||
| 256 | AllowAnonymousFXP no | |
| 257 | ||
| 258 | ||
| 259 | ||
| 260 | # Users can't delete/write files beginning with a dot ('.') | |
| 261 | # even if they own them. If TrustedGID is enabled, this group | |
| 262 | # will have access to dot-files, though. | |
| 263 | ||
| 264 | ProhibitDotFilesWrite yes | |
| 265 | ||
| 266 | ||
| 267 | ||
| 268 | # Prohibit *reading* of files beginning with a dot (.history, .ssh...) | |
| 269 | ||
| 270 | ProhibitDotFilesRead no | |
| 271 | ||
| 272 | ||
| 273 | ||
| 274 | # Never overwrite files. When a file whoose name already exist is uploaded, | |
| 275 | # it get automatically renamed to file.1, file.2, file.3, ... | |
| 276 | ||
| 277 | AutoRename yes | |
| 278 | ||
| 279 | ||
| 280 | ||
| 281 | # Disallow anonymous users to upload new files (no = upload is allowed) | |
| 282 | ||
| 283 | AnonymousCantUpload yes | |
| 284 | ||
| 285 | ||
| 286 | ||
| 287 | # Only connections to this specific IP address are allowed to be | |
| 288 | # non-anonymous. You can use this directive to open several public IPs for | |
| 289 | # anonymous FTP, and keep a private firewalled IP for remote administration. | |
| 290 | # You can also only allow a non-routable local IP (like 10.x.x.x) to | |
| 291 | # authenticate, and keep a public anon-only FTP server on another IP. | |
| 292 | ||
| 293 | #TrustedIP 10.1.1.1 | |
| 294 | ||
| 295 | ||
| 296 | ||
| 297 | # If you want to add the PID to every logged line, uncomment the following | |
| 298 | # line. | |
| 299 | ||
| 300 | #LogPID yes | |
| 301 | ||
| 302 | ||
| 303 | ||
| 304 | # Create an additional log file with transfers logged in a Apache-like format : | |
| 305 | # fw.c9x.org - jedi [13/Dec/1975:19:36:39] "GET /ftp/linux.tar.bz2" 200 21809338 | |
| 306 | # This log file can then be processed by www traffic analyzers. | |
| 307 | ||
| 308 | # AltLog clf:/var/log/pureftpd.log | |
| 309 | ||
| 310 | ||
| 311 | ||
| 312 | # Create an additional log file with transfers logged in a format optimized | |
| 313 | # for statistic reports. | |
| 314 | ||
| 315 | # AltLog stats:/var/log/pureftpd.log | |
| 316 | ||
| 317 | ||
| 318 | ||
| 319 | # Create an additional log file with transfers logged in the standard W3C | |
| 320 | # format (compatible with most commercial log analyzers) | |
| 321 | ||
| 322 | # AltLog w3c:/var/log/pureftpd.log | |
| 323 | ||
| 324 | ||
| 325 | ||
| 326 | # Disallow the CHMOD command. Users can't change perms of their files. | |
| 327 | ||
| 328 | #NoChmod yes | |
| 329 | ||
| 330 | ||
| 331 | ||
| 332 | # Allow users to resume and upload files, but *NOT* to delete them. | |
| 333 | ||
| 334 | #KeepAllFiles yes | |
| 335 | ||
| 336 | ||
| 337 | ||
| 338 | # Automatically create home directories if they are missing | |
| 339 | ||
| 340 | #CreateHomeDir yes | |
| 341 | ||
| 342 | ||
| 343 | ||
| 344 | # Enable virtual quotas. The first number is the max number of files. | |
| 345 | # The second number is the max size of megabytes. | |
| 346 | # So 1000:10 limits every user to 1000 files and 10 Mb. | |
| 347 | ||
| 348 | #Quota 1000:10 | |
| 349 | ||
| 350 | ||
| 351 | ||
| 352 | # If your pure-ftpd has been compiled with standalone support, you can change | |
| 353 | # the location of the pid file. The default is /var/run/pure-ftpd.pid | |
| 354 | ||
| 355 | #PIDFile /var/run/pure-ftpd.pid | |
| 356 | ||
| 357 | ||
| 358 | ||
| 359 | # If your pure-ftpd has been compiled with pure-uploadscript support, | |
| 360 | # this will make pure-ftpd write info about new uploads to | |
| 361 | # /var/run/pure-ftpd.upload.pipe so pure-uploadscript can read it and | |
| 362 | # spawn a script to handle the upload. | |
| 363 | ||
| 364 | #CallUploadScript yes | |
| 365 | ||
| 366 | ||
| 367 | ||
| 368 | # This option is useful with servers where anonymous upload is | |
| 369 | # allowed. As /var/ftp is in /var, it save some space and protect | |
| 370 | # the log files. When the partition is more that X percent full, | |
| 371 | # new uploads are disallowed. | |
| 372 | ||
| 373 | MaxDiskUsage 99 | |
| 374 | ||
| 375 | ||
| 376 | ||
| 377 | # Set to 'yes' if you don't want your users to rename files. | |
| 378 | ||
| 379 | NoRename yes | |
| 380 | ||
| 381 | ||
| 382 | ||
| 383 | # Be 'customer proof' : workaround against common customer mistakes like | |
| 384 | # 'chmod 0 public_html', that are valid, but that could cause ignorant | |
| 385 | # customers to lock their files, and then keep your technical support busy | |
| 386 | # with silly issues. If you're sure all your users have some basic Unix | |
| 387 | # knowledge, this feature is useless. If you're a hosting service, enable it. | |
| 388 | ||
| 389 | CustomerProof yes | |
| 390 | ||
| 391 | ||
| 392 | ||
| 393 | # Per-user concurrency limits. It will only work if the FTP server has | |
| 394 | # been compiled with --with-peruserlimits (and this is the case on | |
| 395 | # most binary distributions) . | |
| 396 | # The format is : <max sessions per user>:<max anonymous sessions> | |
| 397 | # For instance, 3:20 means that the same authenticated user can have 3 active | |
| 398 | # sessions max. And there are 20 anonymous sessions max. | |
| 399 | ||
| 400 | # PerUserLimits 3:20 | |
| 401 | ||
| 402 | ||
| 403 | ||
| 404 | # When a file is uploaded and there is already a previous version of the file | |
| 405 | # with the same name, the old file will neither get removed nor truncated. | |
| 406 | # Upload will take place in a temporary file and once the upload is complete, | |
| 407 | # the switch to the new version will be atomic. For instance, when a large PHP | |
| 408 | # script is being uploaded, the web server will still serve the old version and | |
| 409 | # immediatly switch to the new one as soon as the full file will have been | |
| 410 | # transfered. This option is incompatible with virtual quotas. | |
| 411 | ||
| 412 | # NoTruncate yes | |
| 413 | ||
| 414 | ||
| 415 | ||
| 416 | # This option can accept three values : | |
| 417 | # 0 : disable SSL/TLS encryption layer (default). | |
| 418 | # 1 : accept both traditional and encrypted sessions. | |
| 419 | # 2 : refuse connections that don't use SSL/TLS security mechanisms, | |
| 420 | # including anonymous sessions. | |
| 421 | # Do _not_ uncomment this blindly. Be sure that : | |
| 422 | # 1) Your server has been compiled with SSL/TLS support (--with-tls), | |
| 423 | # 2) A valid certificate is in place, | |
| 424 | # 3) Only compatible clients will log in. | |
| 425 | ||
| 426 | # TLS 1 | |
| 427 | ||
| 428 | ||
| 429 | ||
| 430 | # Listen only to IPv4 addresses in standalone mode (ie. disable IPv6) | |
| 431 | # By default, both IPv4 and IPv6 are enabled. | |
| 432 | ||
| 433 | # IPV4Only yes | |
| 434 | ||
| 435 | ||
| 436 | ||
| 437 | # Listen only to IPv6 addresses in standalone mode (ie. disable IPv4) | |
| 438 | # By default, both IPv4 and IPv6 are enabled. | |
| 439 | ||
| 440 | # IPV6Only yes | |
| 441 | ||
| 442 | # UTF-8 support for file names (RFC 2640) | |
| 443 | # Define charset of the server filesystem and optionnally the default charset | |
| 444 | # for remote clients if they don't use UTF-8. | |
| 445 | # Works only if pure-ftpd has been compiled with --with-rfc2640 | |
| 446 | ||
| 447 | # FileSystemCharset big5 | |
| 448 | # ClientCharset big5 | |
