piekļūšana proftpd serverim

uztaisīju proftpd serveri uz ubuntu 6.10

/etc/proftpd/proftpd.conf saturs

# To really apply changes reload proftpd after modifications.
AllowOverwrite on
AuthAliasOnly on

# Choose here the user alias you want !!!!
UserAlias user userftp

ServerName "Mans serveris"
ServerType standalone
DeferWelcome on

MultilineRFC2228 on
DefaultServer on
ShowSymlinks off

TimeoutNoTransfer 600
TimeoutStalled 100
TimeoutIdle 2200

DisplayFirstChdir               .message
ListOptions                 "-l"

RequireValidShell off

TimeoutLogin 20

RootLogin off

# It's better for debug to create log files ;-)
ExtendedLog /var/log/ftp.log
TransferLog /var/log/xferlog
SystemLog /var/log/syslog.log

#DenyFilter \*.*/

# I don't choose to use /etc/ftpusers file (set inside the users you want to ban, not useful for me)
UseFtpUsers off

# Allow to restart a download
AllowStoreRestart on

# Port 21 is the standard FTP port, so don't use it for security reasons (choose here the port you want)
Port 21

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 8

# Set the user and group that the server normally runs at.
User                  nobody
Group                 nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022

PersistentPasswd off

MaxClients 8
MaxClientsPerHost 8
MaxClientsPerUser 8
MaxHostsPerUser 8

# Display a message after a successful login
AccessGrantMsg "welcome !!!"
# This message is displayed for each access good or not
ServerIdent                  on       "you're at home"

# Set /home/FTP-shared directory as home directory
DefaultRoot /home/FTP-shared

# Lock all the users in home directory, ***** really important *****
DefaultRoot ~

MaxLoginAttempts    5

#VALID LOGINS
<Limit LOGIN>
#AllowUser userftp
DenyALL
</Limit>

<Directory /home/FTP-shared>
Umask 022 022
AllowOverwrite off
<Limit MKD STOR DELE XMKD RNRF RNTO RMD XRMD>
DenyAll
</Limit>
</Directory>

<Directory /home/FTP-shared/download/*>
Umask 022 022
AllowOverwrite off
<Limit MKD STOR DELE XMKD RNEF RNTO RMD XRMD>
DenyAll
</Limit>
</Directory>

<Directory> /home/FTP-shared/upload/>
Umask 022 022
AllowOverwrite on
<Limit READ RMD DELE>
      DenyAll
    </Limit>

    <Limit STOR CWD MKD>
      AllowAll
    </Limit>
</Directory>

# This sample configuration file illustrates configuring two
# anonymous directories, and a guest (same thing as anonymous but
# requires a valid password to login)

ServerName "ProFTPD Anonymous Server"
ServerType standalone

# Port 21 is the standard FTP port.
Port 21

# If you don't want normal users logging in at all, uncomment this
# next section
#<Limit LOGIN>
#  DenyAll
#</Limit>

# Set the user and group that the server normally runs at.
User nobody
Group nogroup

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    30

# Set the maximum number of seconds a data connection is allowed
# to "stall" before being aborted.
TimeoutStalled 300

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Our "basic" anonymous configuration, including a single
# upload directory ("uploads")
<Anonymous ~ftp>

 # Allow logins if they are disabled above.
 <Limit LOGIN>
   AllowAll
 </Limit>

 # Maximum clients with message
 MaxClients 5 "Sorry, max %m users -- try again later"

 User ftp
 Group ftp
 # We want clients to be able to login with "anonymous" as well as "ftp"
 UserAlias anonymous ftp

 # Limit WRITE everywhere in the anonymous chroot
 <Limit WRITE>
   DenyAll
 </Limit>

 # An upload directory that allows storing files but not retrieving
 # or creating directories.
 <Directory uploads/*>
   <Limit READ>
     DenyAll
   </Limit>

   <Limit STOR>
     AllowAll
   </Limit>
 </Directory>
</Anonymous>

# A second anonymous ftp section.  Users can login as "private".  Here
# we hide files owned by root from being manipulated in any way.

<Anonymous /usr/local/private>
 User bobf
 Group users
 UserAlias private bobf
 UserAlias engineering bobf

 # Deny access from *.evil.net and *.otherevil.net, but allow
 # all others.
 <Limit LOGIN>
   Order deny,allow
   Deny from .evil.net, .otherevil.net
   Allow from all
 </Limit>

 # We want all uploaded files to be owned by 'engdept' group and
 # group writable.
 GroupOwner engdept
 Umask 006

 # Hide all files owned by user 'root'
 HideUser root

 <Limit WRITE>
   DenyAll
 </Limit>

 # Disallow clients from any access to hidden files.
 <Limit READ DIRS>
   IgnoreHidden on
 </Limit>

 # Permit uploading and creation of new directories in
 # submissions/public

 <Directory submissions/public>
   <Limit READ>
     DenyAll
     IgnoreHidden on
   </Limit>

   <Limit STOR MKD RMD XMKD XRMD>
     AllowAll
     IgnoreHidden on
   </Limit>
 </Directory>
</Anonymous>

# The last anonymous example creates a "guest" account, which clients
# can authenticate to only if they know the user's password.

<Anonymous ~guest>
 User guest
 Group nobody
 AnonRequirePassword on

 <Limit LOGIN>
   AllowAll
 </Limit>

 # Deny write access from all except trusted hosts.
 <Limit WRITE>
   Order allow, deny
   Allow from 10.0.0.
   Deny from all
 </Limit>
</Anonymous>

kā panākt, lai visi (anonīmie) serverī tiek bez logina - nu tāpat kā ftp.trubaz.com