www.ProFTPD.de

# This is a basic ProFTPD configuration file. It establishes a single
# server and a single anonymous login. It assumes that you have a
# user/group "nobody"/"nogroup" for normal operation and anon.

#    !!! PLEASE read the documentation of proftpd !!!
#
# You can find the documentation in /usr/doc/packages/proftpd/,
# http://www.proftpd.org/ and don't forget to read carefully
# and _follow_ hints on http://www.proftpd.net/security.html.

ServerName                      "pinguin"
#ServerType                     inetd
ServerType                      standalone
ServerAdmin                     alfons@gmx.de
#
# uncomment, if you want to hide the servers name:
#
ServerIdent                     on      "FTP Server ready"
DeferWelcome                    on
DefaultServer                   on

# Enable PAM for authentication...
#
AuthPAM                         on

# Setting this directive to on will cause authentication to fail
# if PAM authentication fails. The default setting, off, allows
# other modules and directives such as AuthUserFile and friends
# to authenticate users.
#
AuthPAMAuthoritative            on

# This directive allows you to specify the PAM service name used
# in authentication (default is "proftpd" on SuSE Linux).
# You have to setup the service in the /etc/pam.d/<other_name>.
#
AuthPAMConfig                   proftpd

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs
# and files from being group and world writable.
Umask                           022

# Set the user and group that the server normally runs at.
User                            nobody
Group                           nogroup

# Normally, we want files to be overwriteable.
<Directory /public>
  AllowOverwrite                off
  HiddenStor                    on
  HideNoAccess                  on
#  DenyAll
</Directory>

# protect .ftpaccess and similar - see also PathDenyFilter
<Directory /*>
  <Limit ALL>
    DenyAll
    IgnoreHidden                on
 </Limit>
</Directory>

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                   30

# Performance: skip DNS resolution when we process the logs...
#UseReverseDNS        off

# Turn off Ident lookups
IdentLookups         off

# Set the maximum number of seconds a data connection is allowed
# to "stall" before being aborted.
TimeoutStalled                  300

# Where do we put the pid files?
ScoreboardPath       /var/run/proftpd



# Do a chroot for web-users (i.e. public or www group), but
# do not change root if the user is also in the users group...
#
#DefaultRoot ~/public_html       public,!users
DefaultRoot /public

# Limit login attempts
MaxLoginAttempts                3


#
# Dort befindet sich die Login Datei... -> bessere Loesung als im
# <Anonymous>. Jetzt zeig er sie immer an!

DisplayConnect          /public/login.msg

<Anonymous /public>
#    After anonymous login, daemon runs as:
     User                       ftp
     Group                      public

     # We want clients to be able to login with "anonymous" as well as "ftp"
     UserAlias                  anonymous ftp

     # Limit the maximum number of anonymous logins
     MaxClients         10

     # login.msg muss sich im root Verzeichnis befinden!
     DisplayLogin               login.msg
     DisplayFirstChdir          .message
</Anonymous>

server:~ # /etc/init.d/proftpd start
Starting ProFTPD Server:                                                done
server:~ # /etc/init.d/proftpd status
Checking for ProFTPD Server:                                         dead

killall proftpd
proftpd -nd9

server:~ # killall proftpd
proftpd: no process killed
server:~ # proftpd -nd9
 - Compiling deny regex '%'.
 - Allocated deny regex at location 0x8090bc8.
server.dom -
server.dom - Config for powered by SuSE Linux:
server.dom - /*
server.dom -  /*.ftp*
server.dom -   Limit
server.dom -    DenyAll
server.dom -    IgnoreHidden
server.dom -   AllowOverwrite
server.dom -   HiddenStor
server.dom -   Umask
server.dom -   DenyFilter
server.dom -  AllowOverwrite
server.dom -  HiddenStor
server.dom -  Umask
server.dom -  DenyFilter
server.dom - ServerIdent
server.dom - DeferWelcome
server.dom - DefaultServer
server.dom - AuthPAM
server.dom - AuthPAMAuthoritative
server.dom - AuthPAMConfig
server.dom - Umask
server.dom - User
server.dom - UserName
server.dom - Group
server.dom - GroupName
server.dom - DenyFilter
server.dom - IdentLookups
server.dom - TransferLog
server.dom - Failed binding to 0.0.0.0, port 21: Address already in use
server.dom - Check the ServerType directive to ensure you are configured correct
ly.

fuser -n tcp 21   (da kommt dann eine Zahl)
ps -ef |grep <die Zahl>

[root@knowledgebase root]# fuser -n tcp 21
21/tcp:              30049
[root@knowledgebase root]# ps -ef |grep 30049
www      30049     1  0 12:49 ?        00:00:00 proftpd: (accepting connections)

server:~ # fuser -n tcp 21
21/tcp:                442
server:~ # ps -ef |grep 442
root       442     1  0 13:42 ?        00:00:00 /usr/sbin/inetd
root       675   524  0 14:11 pts/2    00:00:00 grep 442

server:~ # /etc/init.d/proftpd start
Starting ProFTPD Server: server.dom - Fatal: Socket operation on non-socket
server.dom - (Running from command line? Use `ServerType standalone' in config file!)
startproc:  exit status of parent of /usr/sbin/proftpd: 1
                                                                                 failed

# See man 8 inetd for more information.
#
# If you make changes to this file, either reboot your machine or send the
# inetd a HUP signal with /etc/init.d/inetd reload or by hand:
# Do a ps x as root and look up the pid of inetd. Then do a
# The inetd will re-read this file whenever it gets that signal.
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
echo stream tcp nowait root internal
echo dgram udp wait root internal
discard stream tcp nowait root internal
discard dgram udp wait root internal
daytime stream tcp nowait root internal
daytime dgram udp wait root internal
chargen stream tcp nowait root internal
chargen dgram udp wait root internal
time stream tcp nowait root internal
time dgram udp wait root internal
#
# These are standard services.
#
#ftp stream tcp nowait root /usr/sbin/tcpd wu.ftpd -a
ftp stream tcp nowait root /usr/sbin/tcpd proftpd
ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd
ftp stream tcp nowait root in.proftpd in.proftpd
#
# If you want telnetd not to keep-alives (e.g. if it runs over a ISDN
# uplink), add -n. See 'man telnetd' for more details.
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
# nntp stream tcp nowait news /usr/sbin/tcpd /usr/sbin/leafnode
smtp stream tcp nowait root /usr/sbin/sendmail sendmail -bs
# printer stream tcp nowait root /usr/sbin/tcpd /usr/bin/lpd -i
#
# Shell, login, exec and talk are BSD protocols.
# The option -h permits .rhosts'' files for the superuser. Please look at
# man-page of rlogind and rshd to see more configuration possibilities about
# .rhosts files.
shell stream tcp nowait root /usr/sbin/tcpd in.rshd -L
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -aL
#
# If you want rlogind not to keep-alives (e.g. if it runs over a ISDN
# uplink), add -n. See 'man rlogind' for more details.
login stream tcp nowait root /usr/sbin/tcpd in.rlogind
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind -a
# exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
talk dgram udp wait root /usr/sbin/tcpd in.talkd
ntalk dgram udp wait root /usr/sbin/tcpd in.talkd
#netperf stream tcp nowait root /opt/netperf/netserver netserver
# These entries are for the KDE version of talk. If you enable them,
# you have to disable the version above.
# dgram udp wait root /usr/sbin/tcpd /opt/kde2/bin/ktalkd
# dgram udp wait root /usr/sbin/tcpd /opt/kde2/bin/ktalkd
#
#
# Pop et al
#
# pop2 stream tcp nowait root /usr/sbin/tcpd in.pop2d
pop3 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/popper -s
#
# Imapd - Interactive Mail Access Protocol server
# Attention: This service is very insecure
# imap stream tcp nowait root /usr/sbin/tcpd imapd
#
# Comsat - has to do with mail.
#
# comsat dgram udp wait root /usr/sbin/tcpd in.comsat
#
# The Internet UUCP service.
#
# uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting. Most sites
# run this only on machines acting as boot servers.
#
# tftp dgram udp wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot
# bootps dgram udp wait root /usr/sbin/bootpd bootpd -c /tftpboot
#
# Finger, systat and netstat give out user information which may be
# valuable to potential system crackers. Many sites choose to disable
# some or all of these services to improve security.
# Try telnet localhost systat and telnet localhost netstat to see that
# information yourself!
#
finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd -w
# systat stream tcp nowait nobody /usr/sbin/tcpd /bin/ps -auwwx
netstat stream tcp nowait root /usr/sbin/tcpd /bin/netstat -a
#
# For man on the fly and ht://dig (full text search)
#
# http-rman stream tcp nowait.10000 nobody /usr/sbin/tcpd /usr/sbin/http-rman
#
# For XCept4
#
# btx stream tcp nowait root /usr/sbin/tcpd /usr/lib/xcept4/bin/ceptd -i/usr/lib/xcept4/etc/init.ceptd -u/usr/lib/xcept4/etc/users.ceptd -l/var/log/log.ceptd
#
# For rplay daemon
#
# Old versions of rplay:
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -b 8192 -c 60 -s 8192
# New Versions of rplay (>=3.3.0)
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -t 30 -c 60 -s 16384 -F0 --inetd
#
# vbox (Voice Box)
# vboxd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/vboxd
#
# For midinetd
# midinet stream tcp nowait root /usr/sbin/tcpd in.midinetd
#
# swat is the Samba Web Administration Tool
 swat stream tcp nowait.400 root /usr/sbin/swat swat
#
#
# amanda backup server with indexing capabilities
# amandaidx stream tcp nowait root /usr/lib/amanda/amindexd amindexd
# amidxtape stream tcp nowait root /usr/lib/amanda/amidxtaped amidxtaped
#
# amanda backup client
# amanda dgram udp wait amanda /usr/lib/amanda/amandad amandad
#
# the rsync daemon
# rsync stream tcp nowait root /usr/sbin/tcpd /usr/sbin/rsyncd --daemon
#
#
# Mimer database
# mimer stream tcp nowait root /opt/mimer/bin/mimtcp mimtcp -l
#
# CVS pserver (remote acces to your CVS repositories)
# Please read the section on security and passwords in the CVS manual,
# before you enable this.
# cvspserver stream tcp nowait root /usr/sbin/tcpd /usr/bin/cvs -f --allow-root=/home/cvsroot pserver
#
# procstatd deamon (cluster software)
# procstatd stream tcp nowait nobody /usr/sbin/tcpd /usr/sbin/procstatd -i 7885
#
# End.
webmin  tcp  root

ftp-data         20/tcp                 # File Transfer [Default Data]
ftp-data         20/udp                 # File Transfer [Default Data]
ftp                 21/tcp                 # File Transfer [Control]
fsp                21/udp                 # UDP File Transfer

server.dom - Failed binding to 0.0.0.0, port 21: Address already in use
server.dom - Check the ServerType directive to ensure you are configured correctly.

server:~ # fuser -n tcp 21
21/tcp:               1290

ps -ef |grep  1290

server:~ # ps -ef |grep 1290
root      1290     1  0 16:20 ?        00:00:00 /usr/sbin/inetd
root      1329   480  0 16:30 pts/0    00:00:00 grep 1290

Sep 22 21:13:37 Delta proftpd[1043]: Delta.local - Failed binding to 0.0.0.0, port 21: Address already in use
Sep 22 21:13:37 Delta proftpd[1043]: Delta.local - Check the ServerType directive to ensure you are configured correctly.

# See "man 8 inetd" for more information.
#
# If you make changes to this file, either reboot your machine or send the
# inetd a HUP signal with "/etc/init.d/inetd reload" or by hand:
# Do a "ps x" as root and look up the pid of inetd. Then do a
# "kill -HUP <pid of inetd>".
# The inetd will re-read this file whenever it gets that signal.
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
# echo stream tcp nowait root internal
# echo dgram udp wait root internal
# discard stream tcp nowait root internal
# discard dgram udp wait root internal
# daytime stream tcp nowait root internal
# daytime dgram udp wait root internal
# chargen stream tcp nowait root internal
# chargen dgram udp wait root internal
# time stream tcp nowait root internal
# time dgram udp wait root internal
#
# These are standard services.
#
# ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd
# ftp stream tcp nowait root /usr/sbin/tcpd vsftpd
#
# If you want telnetd not to "keep-alives" (e.g. if it runs over a ISDN
# uplink), add "-n".  See 'man telnetd' for more details.
# telnet stream  tcp     nowait  root    /usr/sbin/tcpd in.telnetd
# nntp stream tcp nowait news /usr/sbin/tcpd /usr/sbin/leafnode
# smtp stream  tcp     nowait  root    /usr/sbin/sendmail    sendmail -L sendmail -Am -bs
#
# Shell, login, exec and talk are BSD protocols.
#  The option "-h" permits ``.rhosts'' files for the superuser. Please look at
#  man-page of rlogind and rshd to see more configuration possibilities about
#  .rhosts files.
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -L
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -aL
#
# If you want rlogind not to "keep-alives" (e.g. if it runs over a ISDN
# uplink), add "-n".  See 'man rlogind' for more details.
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind -a
# exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
# talk dgram udp wait root /usr/sbin/tcpd in.talkd
# ntalk dgram udp wait root /usr/sbin/tcpd in.talkd
#
# Pop et al
#
# pop2 stream tcp nowait root /usr/sbin/tcpd ipop2d
# pop3 stream tcp nowait root /usr/sbin/tcpd ipop3d
# pop3 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/popper -s
#
# Imapd - Interactive Mail Access Protocol server
# Attention:  This service is very insecure
# imap stream tcp nowait root /usr/sbin/tcpd imapd
#
# FAM - file alteration monitor, report changes of files
# sgi_fam/1-2 stream    rpc/tcp wait    root    /usr/sbin/fam      fam
#
# Comsat - has to do with mail.
#
# comsat dgram udp wait root /usr/sbin/tcpd in.comsat
#
# The Internet UUCP service.
#
# uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting.  Most sites
# run this only on machines acting as "boot servers."
#
# tftp          dgram   udp     wait    root /usr/sbin/in.tftpd  in.tftpd -s /tftpboot
# bootps dgram udp wait root /usr/sbin/bootpd bootpd -c /tftpboot
#
# Finger, systat and netstat give out user information which may be
# valuable to potential "system crackers."  Many sites choose to disable
# some or all of these services to improve security.
# Try "telnet localhost systat" and "telnet localhost netstat" to see that
# information yourself!
#
# finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd -w
# systat stream tcp nowait nobody /usr/sbin/tcpd /bin/ps -auwwx
# netstat stream tcp nowait root /usr/sbin/tcpd /bin/netstat -a
#
# For man on the fly and ht://dig (full text search)
#
# http-rman stream tcp nowait.10000 nobody /usr/sbin/tcpd /usr/sbin/http-rman
#
# For XCept4
#
# btx stream tcp nowait root /usr/sbin/tcpd /usr/lib/xcept4/bin/ceptd -i/usr/lib/xcept4/etc/init.ceptd -u/usr/lib/xcept4/etc/users.ceptd -l/var/log/log.ceptd
#
# For rplay daemon
#
# Old versions of rplay:
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -b 8192 -c 60 -s 8192
# New Versions of rplay (>=3.3.0)
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -t 30 -c 60 -s 16384 -F0 --inetd
#
# vbox (Voice Box)
# vboxd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/vboxd
#
# For midinetd
# midinet stream tcp nowait root /usr/sbin/tcpd in.midinetd
#
# swat is the Samba Web Administration Tool
# swat stream tcp nowait.400 root /usr/sbin/swat swat
#
#
# amanda backup server with indexing capabilities
# amandaidx stream tcp nowait amanda /usr/lib/amanda/amindexd amindexd
# amidxtape stream tcp nowait amanda /usr/lib/amanda/amidxtaped amidxtaped
#
# amanda backup client
# amanda dgram udp wait amanda /usr/lib/amanda/amandad amandad
#
# the rsync daemon
# rsync stream tcp nowait root /usr/sbin/tcpd /usr/sbin/rsyncd --daemon
#
#
# Mimer database
# mimer stream tcp nowait root /opt/mimer/bin/mimtcp mimtcp -l
#
# CVS pserver (remote acces to your CVS repositories)
# Please read the section on security and passwords in the CVS manual,
# before you enable this.
# cvspserver stream tcp nowait root /usr/sbin/tcpd /usr/bin/cvs -f --allow-root=/home/cvsroot pserver
#
# procstatd deamon (cluster software)
# procstatd stream tcp nowait nobody /usr/sbin/tcpd /usr/sbin/procstatd -i 7885
#
#
# LPD client support of CUPS
# Please enable only, after reading the manual, if no LPD daemon is running,
# and after cups-lpd (package: cups.rpm) is installed.
# printer       stream  tcp     nowait  lp      /usr/lib/cups/daemon/cups-lpd cups-lpd -o document-format=application/octet-stream
ftp stream tcp nowait /home/pentrox/proftpd-1.2.8 proftpd
#
# End.

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName "ProFTPD Default Installation"
ServerType inetd
#ServerType standalone
DefaultServer on

ServerIdent on "FTP Server ready"
DeferWelcome on

#AuthPAM on

#AuthPAMAuthoritative on

#AuthPAMConfig proftpd


# Port 21 is the standard FTP port.
Port 21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances 30

# Set the user and group under which the server will run.
User nobody
Group nogroup

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~

# Normally, we want files to be overwriteable.
<Directory /public>
  AllowOverwrite off
  HiddenStor on
  HideNoAccess on
#DenyAll
</Directory>

#pathdenyfilter see also
<Directory /*>
  <Limit All>
    DenyAll
    IgnoreHidden on
  </Limit>
</Directory>

IdentLookups off

TimeoutStalled 300

#ScoreboardPath /var/run/proftpd

DefaultRoot /public

MaxLoginAttempts 3


# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous /public>
  User ftp
  Group public
 

  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients 10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin welcome.msg
  DisplayFirstChdir .message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>

Delta.local - fatal: Socket operation on non-socket
Delta.local - (Running from command line? Use `ServerType standalone' in config file!)

Delta:/etc # fuser -n tcp 21
21/tcp: 954
Delta:/etc # ps -ef |grep 954
nobody    954     1  0 20:58 ? 00:00:00 proftpd: (accepting connections)
root     1142   995  0 21:57 pts/0 00:00:00 grep 954

ServerName "Delta FTP Server"
#ServerType inetd
ServerType standalone
DefaultServer off

ServerIdent on "Delta: I´m ready!"
DeferWelcome off #??

Port 21
Umask 022
MaxInstances 5 #maximale verbindungen

User nobody #server-user
Group nogroup #server-group

IdentLookups off
TimeoutStalled 300 #t ohne datentransfer
DefaultRoot /home/public #rootverzeichnisangabe
MaxLoginAttempts 3 #einlogversuche vor trennung pro user

<Anonymous /home/public>

  User ftp
  Group public
 
  UserAlias anonymous ftp
  UserAlias guest ftp
  UserAlias gast ftp
  MaxClients 3 "%m sind schon aufm Server, is genug :P"

  <Limit WRITE>
    Deny All
  </Limit>

<Directory /home/public/uploads/*>
  <Limit READ>
    DenyAll
  </Limit>

  <Limit STOR>
    AllowAll
  </Limit>
</Directory>

</Anonymous>

<Directory /home/public/uploads/>
  <Limit READ>
    DenyAll
  </Limit>

  <Limit WRITE>
    AllowAll
  </Limit>
</Directory>

chmod -R 777 /home/public/uploads/