DefaultRoot ~

# BOF
#
# Doc Nielsen's Custom made proftpd.conf
# Should work on all Freesco Systems
# This file was created while my winamp was playing
# Tim McGraw - Something Like That
# And therefore might be a bit wild ;o)
#
# Server Main Variables
ServerName         "ProFTPD on Freesco (Package By Doc Nielsen)"
ServerIdent      on   "ProFTPD on Freesco (Package By Doc Nielsen)"
ServerType         standalone
ServerAdmin         " root@localhost " # Change to your email address or ignore it
Port            21
DefaultServer      on  # Master switch
DeferWelcome      on   # dont send welcome until user is logged in
RootLogin      on      # Well its not smart, but most people dont have any other user than root
Identlookups      off  # why bother? identd can be anything
UseReverseDNS      off # Names can be spoofed. IP's can't be spoofed that easily
LoginPasswordPrompt   off # dont ask for password, if username doesnt exist
#PassivePorts         60000 60050 # PASV ports to use
#MasqueradeAddress      ftp.docnielsen.dk # Change to your dyndns name
#
# AUTH and FILE Settings
Umask         0133   0022
User   nobody        # and only nobody
Group   nobody   
DefaultRoot         ~
AuthUserFile         /etc/passwd  # where to read user/ passwords.
AuthGroupFile         /etc/group  # where to read groups
UseFtpUsers      off            # dont use /etc/ftpusers
PersistentPasswd   on         # allow reading /etc/passwd even after chroot
AccessGrantMsg         "Access granted. Welcome %u !!!"
#
# Load Balancing
MaxClientsPerHost      10   "Sorry, you may not connect more than 10 times."
MaxClients         30   "Sorry, Maximum users allowed is 30."
MaxLoginAttempts      5 # Max number of login attempts before disconnecting
MaxInstances         50   # Max number of running processes
MaxLoad         10.0   "Server is very busy. Seek life elsewhere..."
#
# Timeouts
TimeoutIdle         999  # you can idle a lot
TimeoutLogin         30  # you got 30 seconds to login
TimeoutNoTransfer      999 # you can idle a lot
TimeoutStalled         60 # if a transfer stalls, we give it 60 seconds to resume in
TimesGMT      on       # GMT times are best - makes the world stand still
#
# Speed Limits
RateReadBPS         104857600
RateWriteBPS         104857600
RateReadFreeBytes      104857600
RateWriteFreeBytes      104857600
RateReadHardBPS      on
RateWriteHardBPS   on
#
# Logging (makes 1 big logfile, and shows warnings on tty3)
SystemLog         /dev/tty3 # log warnings to tty3
SyslogLevel         warn    # SyslogLevel emerg|alert|crit|error|warn|notice|info|debug
TransferLog         NONE    # you want a transferlog? make it /var/proftpd/transfer.log
# logformat: %A Anonymous username  %b Bytes sent for request 
# %f/%F Absolute/Relative Filename  %h user host  %a user ip  %l user ident
# %m method/command  %p local port  %v local server name %P Process id(pid)
# %r full command line  %t time  %T transfer time  %s Numeric FTP code  %u user
# The logfile is disabled, since it can grow quite big. enable if you like
LogFormat   xfer   "%t %a %u (%r) %f" # how the log "xfer" should be
#ExtendedLog      /var/proftpd/proftpd.log   auth,read,write   xfer # the xfer log
#ScoreboardPath      /var/proftpd/score/ # each pid has a scoreboard. rc_proftpd clears it.
#
# Global settings
<Global>
   <Limit LOGIN>
      Allow from All   # anyone can log in
      IgnoreHidden      on # hide hidden files
   </Limit>
   AllowForeignAddress   on # even strangers can try to log in
   PathDenyFilter         "(^|/)[-.~]" # ignore+hide files starting with - . ~
   AllowOverwrite      on # well its ok to overwrite your own files
   UseGlobbing         off # globbing = wildcards in filename
   ShowSymlinks      on  # yeah lets see thoes symlinks
</Global>
#
# Setting rights for home directory
<Directory ~>
   AllowStoreRestart   on # you may resume uploads
   AllowRetrieveRestart   on # you may resume downloads
   HideNoAccess      on  # hide files you dont have access to
</Directory>
#
# Disable Anonymous completely
<Anonymous /tmp> 
   User         nobody     # Anon = nobody
   Group         nobody    # ditto
   UserAlias         anonymous nobody
   MaxClients         10
   <Limit All Login>
      Deny From All
      DenyAll
   </Limit>
</Anonymous>
#
# Please check the mod_time config webpage for config tips
# http://www.castaglia.org/proftpd/modules/mod_time.html
#DisplayAfterHours   /var/proftpd/AfterHours.txt 
#NamedTime   all-hours   00:00:00-23:59:59   *      # from midnight to midnight
#NamedTime   normal-hours   08:00:00-17:00:00   1-5 # from 8am to 5pm
#NamedTime   after-hours   !08:00:00-17:00:00   0,6 # from 5pm to 8am
#CommandTimes   all   normal-hours                # evryone may log in 8am to 5pm
#GroupCommandTimes   users   all   all-hours        # users may log in at all times
#UserCommandTimes   root   all   all-hours          # root may log in at all times
#UserCommandTimes   nobody   NONE   all-hours       # anonymous may do nothing at all times
#
# Please check the mod_quotatab config webpage for config tips
# http://www.castaglia.org/proftpd/modules/mod_quotatab.html
# http://www.castaglia.org/proftpd/modules/ftpquota.html
# the ftpquota script is a perl-script (thus requires the perl package)
# QuotaTab settings
#QuotaEngine         off
#QuotaLimitTable      file   /var/proftpd/FTPQuota.DB
#QuotaLog         /var/proftpd/FTPquota.log
#QuotaTallyTable      file   /var/proftpd/FTPTally.DB
#QuotaDisplayUnits      "Kb"
#
# Quota settings
#Quotas   off
#DefaultQuota   1024
#QuotaType   soft
#QuotaCalc   off
#QuotaExempt   0 #no quota for uid 0 (root)
#QuotaBlockSize   1
#QuotaBlockName   "byte"
#
# Ratio settings
#Ratios   off
#SaveRatios   off
#RatioFile   /etc/proftpd.ratio
#RatioTempFile   /etc/proftpd.ratio.temp
#CwdRatioMsg   "Please upload!"
#FileRatioErrMsg   "Come on, you can send more files than that...."
#ByteRatioErrMsg   "This file is %i big, you know...."
#LeechRatioMsg   "You have Unlimited Leech Access!"
#UserRatio   root   0 0 0 0 # Leech Access to root
#HostRatio   192.168.1.10   100 10 5 100000 # 100:1 files, 10 file credit, 5:1 bytes, 100k byte credit
#GroupRatio   0   4 100 105 100000
#AnonRatio   billyg@microsoft.com   1 0 1 0 # 1:1 ratio, no credits
#
# EOF

# Oczywiście chodzi tu o środowisko 'chroot' stworzone dla
# użytkownika anonymous
<Limit WRITE>
AllowUser twoj_user
DenyAll
</Limit7gt;
</Anonymous>
# koniec definicji użytkownika anonymous
DefaultRoot ~
# ~ - powoduje, że kazdy user zostanie wpuszczony tylko do swojego katalogu i nigdzie dalej

 </Limit>

</Limit>

<Anonymous /tmp> 
   User         nobody     # Anon = nobody
   Group         nobody    # ditto
   UserAlias         anonymous nobody
   MaxClients         10
   <Limit All Login>
      Deny From All
      DenyAll
   </Limit>
</Anonymous>

<Anonymous /tmp> 
   User         nobody     # Anon = nobody
   Group         nobody    # ditto
   UserAlias         anonymous nobody
   MaxClients         10
   <Limit All Login>
#     Deny From All
#     DenyAll
   </Limit>
</Anonymous>