LinuxQuestions.org - Help with ProFTPd

Example of ProFTPd configuration file:
Code:
# full documentation is located at

# http://proftpd.linux.co.uk/localsite...userguide.html



# ---------------------------------------------------------

# basic server settings

# ---------------------------------------------------------

# Help the abuse mailers ;-)

        ServerAdmin                "admin@domain.com"

# Don't help attackers to find exploits easily ...

        ServerIdent                off

# Server is started/stopped through xinetd (inetd)

        ServerType                inetd

# It's the default ...

        DefaultServer                on

# Allow logins from Foreign addresses

        AllowForeignAddress        on

# Port where the server will respond to

        Port                        21

# Passive Ports (port range), e. g. for firewall

        PassivePorts                64000 65535

# Maximal Instances of server ..

        MaxInstances                150

# server started as

        User                        nobody

        Group                        nogroup

# timeout settings

        TimeoutLogin                60

        TimeoutIdle                300

        TimeoutNoTransfer        300

        TimeoutStalled                300

# logging settings

#        TransferLog                /var/log/proftpd-transfer.log



# ---------------------------------------------------------

# default directory settings

# ---------------------------------------------------------

<Directory /*>

# hide files where the user has no access to

        HideNoAccess                on

</Directory>



# ---------------------------------------------------------

# global configuration

# ---------------------------------------------------------

<Global>

# 1. security related configuration

#        a) shell account needed to login?

        RequireValidShell        off

#        b) no anonymous logins

        LoginPasswordPrompt        off

        <Limit LOGIN>

                DenyUser        anonymous

        </Limit>

#        c) maximum login attempts

        MaxLoginAttempts        3

#        d) chrooted to home directory

        DefaultRoot                ~

#        e) deny these filenames

        PathDenyFilter                "(\.ftpaccess)$"

#        PathDenyFilter          "(\.htaccess)|(\.ftpaccess)$"

#        f) allow users to overwrite files they own

        AllowOverwrite                on

#        g) allow people to overwrite files

#                NOTE:        will allow any writable file to be corrupted by a malicious user

#                        WsFTP seems having problems without it

        AllowStoreRestart        on

#        h) allow transfers to be continued ...

        AllowRetrieveRestart        on



# 2. messages displayed

#        a) before login

        DisplayConnect                /etc/proftpd/login.msg

#        b) after login (welcome msg)

#        DisplayLogin                /etc/proftpd/welcome.msg





# 3. some performance tuning

#        a) delays off

        tcpNoDelay                off

</Global>
From now on users on your box can login (except root). So for instance if you use
Code:
useradd -g users example -s /bin/false
And set a passwd for that user, that user may logon and will be banned to the homedirectory!

If you need more help please refer to http://www.proftpd.org/docs/