www.ProFTPD.de

# Loading required modules
LoadModule mod_autohost.c
LoadModule mod_ban.c
LoadModule mod_deflate.c
LoadModule mod_diskuse.c
LoadModule mod_gzipfs.c
LoadModule mod_ifsession.c
LoadModule mod_ldap.c
LoadModule mod_load.c
LoadModule mod_msg.c
LoadModule mod_quotatab.c
LoadModule mod_quotatab_file.c
LoadModule mod_quotatab_sql.c
LoadModule mod_quotatab_ldap.c
LoadModule mod_ratio.c
LoadModule mod_readme.c
LoadModule mod_rewrite.c
LoadModule mod_site_misc.c
LoadModule mod_sql.c
LoadModule mod_sql_mysql.c
LoadModule mod_tls.c

    <IfModule mod_tls.c>
TLSEngine On
        TLSLog /var/log/proftpd/tls.log
        TLSProtocol SSLv23
        TLSRequired Off
        TLSRSACertificateFile /etc/proftpd/host.cert
        TLSRSACertificateKeyFile /etc/proftpd/host.key
        #TLSCACertificateFile /root/ssh_ca/ca.crt
        TLSVerifyClient Off
    </IfModule>
   
    <IfModule mod_ban.c>
BanEngine off
BanTable /var/run/proftpd
BanLog /var/log/proftpd/ban.log
BanMessage "IP/Klasse/User %a%c%u ist gebannt. (evtl. zu viel Loginversuche)"

# events go here
BanOnEvent MaxLoginAttempts 1/00:00:30 00:03:00
    </IfModule>
   
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName "britmachine"
ServerType standalone
ServerAdmin britneyfreek@local.net
DefaultServer on
# enable this if using ACLs with FQDNs
UseReverseDNS off
IdentLookups off
# do not log to syslog as by default
SystemLog /var/log/proftpd/proftpd.log

# Port 21 is the standard FTP port.
Port 21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances 30

# Set the user and group under which the server will run.
User nobody
Group nogroup

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~

# Normally, we want files to be overwriteable.
AllowOverwrite off

# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
  DenyAll
</Limit>

<Global>

   
    # Some standard timeout definitions
    TimeoutIdle 180 # kick user after 3 minutes being idle
    TimeoutStalled 60 # close stalled datatransfers
    TimeoutSession 0 # time a session can endure
    TimeoutNoTransfer 180 # kick client after x seconds of having done no transfer
   
    # file transfer handling
    AllowRetrieveRestart on
    AllowStoreRestart off
    DeleteAbortedStores on

    # disable req. off a valid shell because it is not nessecary in our case
    RequireValidShell off

    # messages
    DisplayLogin .ftpmsg.welcome
    DisplayFirstChdir readme.txt
   
    # security
    DefaultRoot ~ !staff
    HiddenStor on
    MaxLoginAttempts 3 # 3 is the default
    AllowForeignAddress on
    ShowSymlinks off
    DirFakeGroup off
    DirFakeUser off


    <Directory ~britneyfreek/share>
<Limit LIST,WRITE,STOR>
    AllowAll
</Limit>
<Limit DELE>
    DenyAll
</Limit>
    </Directory>

    # module configuration
    <IfModule mod_sql.c>
<IfModule mod_sql_mysql.c>
    # Enable SQL auth method
    SQLAuthenticate users* groups* userset groupset
   
    # SQL connection information
    SQLConnectInfo proftpd@localhost pftp ftp

    # Authentication
    SQLAuthTypes Backend Plaintext

    SQLDefaultGID 65534
    SQLDefaultUID 65534
    SQLMinUserGID 5000
    SQLMinUserUID 10000

    # sql users and groups
    SQLUserInfo users username password uid gid homedir shell
    SQLUserWhereClause "locked=0"
    SQLGroupInfo groups groupname gid members
    SQLGroupWhereClause "locked=0"

    # Log access
    SQLNamedQuery getcount SELECT "count, username FROM users WHERE username='%u' AND locked=0"
    SQLNamedQuery getacctime SELECT "last_access, username, date_format(last_access, '%d.%m.%Y um %H:%i') as last_accessf FROM users WHERE username='%u' AND locked=0"
    SQLNamedQuery updateacclog UPDATE "last_access=now(), count=count+1 WHERE username='%u' AND locked=0" users
    SQLShowInfo PASS "230" " Du hast dich schon %{getcount}x eingeloggt. Letzter: %{getacctime}"
    SQLLog PASS updateacclog

    # Transfer logging
    SQLLog STOR,RETR xfer
    SQLNamedQuery xfer INSERT "'%u', '%f', '%b', '%h', '%a', '%m', '%T', now(), now()" log_xfer
</IfModule>
    </IfModule>
   
    <IfModule mod_load.c>
MaxLoad 2.0 "Server ist ausgelastet, bitte warten."
    </IfModule>
       
    <IfModule mod_diskusage.c>
#MaxDiskUsage percent|"none" ["user"|"class"|"group" expression]
    </IfModule>
   
    <IfModule mod_deflate.c>
DeflateEngine on
DeflateLog /var/log/proftpd/deflate.log
UseSendfile off
    </IfModule>
   
    <IfModule mod_gzipfs.c>
# will be the upload folder from the user logged in
GzipFS ~/upload 9
    </IfModule>
   
</Global>

# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous ~ftp>
    User ftp
    Group ftp

    # We want clients to be able to login with "anonymous" as well as "ftp"
    UserAlias anonymous ftp

    # Limit the maximum number of anonymous logins
    MaxClients 10 "Es sind schon max %m Clients verbunden."
    MaxClientsPerHost 3 "Du benutzt schon %m Verbindungen. Mehr geht nicht."

    # We want 'welcome.msg' displayed at login, and '.message' displayed
    # in each newly chdired directory.
    DisplayLogin .ftpmsg.welcome
    DisplayFirstChdir .message

    # Limit WRITE everywhere in the anonymous chroot
    <Limit WRITE>
DenyAll
    </Limit>

    <Directory ~ftp/stuff>
<Limit DELE STOR WRITE>
    DenyAll
</Limit>
    </Directory>
   
    <Directory upload/*>
<Limit STOR WRITE DELE>
    AllowAll
</Limit>
    </Directory>
   
</Anonymous>

<IfModule mod_gzipfs.c>
# will be the upload folder from the user logged in
GzipFS ~/upload 9
    </IfModule>

<IfModule mod_gzipfs.c>
# will be the upload folder from the user logged in
GzipFS upload/ 9
    </IfModule>