Seite drucken - Lokal kein bandbteiten begrenzung, aber nach aussen schon

Hallo,

ich habe folgendes problem:
habe einmal einen proftpdlaufen, dieser läuft auf port 21 (mit und ohne TLS). ich habe eine begrenzug der bandbreite festgelegt da ich diesen über einen DSL anschluss betreibe. lokal hätte ich aber gerne keine begrenzung.
es ist ja aber leider nicht möglich einen virtuelen server auf die lokale ipadresse und port 21 zu binden, da hier ja schon der "haupt" server lauscht. habe mir schon bind und SocketBindTight angeschaut. Bind geht ja nur bei vertuellen servern (?) und SockteBindTight scheint auch nicht das richtige zu sein.

hier mal meine config:

Code:

ServerName "Ilu's FTP"
#ServerType inetd
ServerType standalone
DeferWelcome off
ServerIdent on "Iluminat23's FTP"

MultilineRFC2228 on
DefaultServer on
ShowSymlinks on
AllowOverwrite on
AllowForeignAddress off

TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200

DisplayLogin .welcome.msg
DisplayFirstChdir .message
ListOptions "-l"

DenyFilter \*.*/

UseReverseDNS off
IdentLookups off

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd off

# Uncomment this if you would use TLS module:
#TLSEngine on

# Uncomment this if you would use quota module:
#Quotas on

# Port 21 is the standard FTP port.
Port 21

# Use the IANA registered ephemeral port range
PassivePorts 49152 65534

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

RequireValidShell off

#maxclients
MaxClientsPerHost 4 "Maximal 4 Verbindungen pro IP"

# Set the user and group that the server normally runs at.
User proftpd
Group proftpd

# Normally, we want files to be overwriteable.
<Directory /*>
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 002 002

AllowOverwrite on
</Directory>

# you may not like the bandwidth control below
# TransferRate RETR|STOR|APPE|STOU KBrate:freebytes
TransferRate RETR 90:0
TransferRate STOR 120:0

AllowOverwrite on
AllowRetrieveRestart on
AllowStoreRestart on

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot /mnt/server1

<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/proftpd/tls.log
TLSProtocol TLSv1

# Are clients required to use FTP over TLS when talking to this server?
# TLSRequired on

# Server's certificate
TLSRSACertificateFile /etc/proftpd/host.cert
TLSRSACertificateKeyFile /etc/proftpd/host.key

# CA the server trusts
#TLSCACertificateFile /etc/ftpd/root.cert.pem

# Authenticate clients that want to use FTP over TLS?
TLSVerifyClient off
</IfModule>

<VirtualHost meine.tolle.domain.org>
RootLogin off
DeferWelcome on
DefaultRoot /mnt/server1
ServerAdmin philipp@asdfasdfasdfdsaf.de
ServerName "Ilu's FTPS"
ServerIdent on "Iluminat23's FTPS"
Port 990
PassivePorts 49152 65534
RequireValidShell off

#maxclients
MaxClientsPerHost 4 "Maximal 4 Verbindungen pro IP"

# Set the user and group that the server normally runs at.
User proftpd
Group proftpd

# Normally, we want files to be overwriteable.
<Directory /*>
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 002 002

AllowOverwrite on
</Directory>

# you may not like the bandwidth control below
# TransferRate RETR|STOR|APPE|STOU KBrate:freebytes
TransferRate RETR 90:0
TransferRate STOR 120:0

AllowOverwrite on
AllowRetrieveRestart on
AllowStoreRestart on

<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
#TLSProtocol TLSv1

# Are clients required to use FTP over TLS when talking to this server?
TLSRequired on

# Server's certificate
TLSRSACertificateFile /etc/proftpd/host.cert
TLSRSACertificateKeyFile /etc/proftpd/host.key

# CA the server trusts
#TLSCACertificateFile /etc/ftpd/root.cert.pem

# Authenticate clients that want to use FTP over TLS?
TLSVerifyClient off
</IfModule>
</VirtualHost>

also nochmal in kürze:

auf eth1/ppp0 (meine.tolle.domain.org) will ich bandbreite begrenzen
auf eth0 (192.168.0.254) soll es ohne begrenzung möglich sein

mfg philipp

habe das in der virtualhosts sektion probiert

Code:

Classes on
Class ip 192.168.0.0/24

da bekomme ich diese meldung:

Code:

- Fatal: Classes: deprecated. Use <Class> sections instead. on line 109 of '/etc/proftpd/proftpd.conf

darauf dachte ich mal, teste ich es so:

Code:

dann bekomme ich dies:

Code:

- Fatal: <Class>: directive not allowed in <VirtualHost> context on line 109 of '/etc/proftpd/proftpd.conf'

wenn ich das ganz nun in global mache bekomme ich dies:

Code:

- Fatal: unknown configuration directive 'ip' on line 47 of '/etc/proftpd/proftpd.conf'.

Meine version:

Code:

- ProFTPD Version: 1.2.10 (stable)
- Scoreboard Version: 01040002
- Built: Mon Jun 19 19:11:05 GMT 2006
- Module: mod_core.c
- Module: mod_xfer.c
- Module: mod_auth_unix.c
- Module: mod_auth_file.c
- Module: mod_auth.c
- Module: mod_ls.c
- Module: mod_log.c
- Module: mod_site.c
- Module: mod_ctrls.c
- Module: mod_ratio.c
- Module: mod_readme.c
- Module: mod_auth_pam.c
- Module: mod_wrap.c
- Module: mod_shaper.c
- Module: mod_tls.c
- Module: mod_quotatab.c
- Module: mod_quotatab_file.c
- Module: mod_cap/1.0

mfg philipp

www.ProFTPD.de

ProFTPD => ProFTPD - Deutsch => Thema gestartet von: iluminat23 am 20. Juni 2006, 17:56:04