UNIX for Advanced & Expert Users

# Includes DSO modules
Include /etc/proftpd/modules.conf

# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6                         off

ServerName                      "abc.cde.de"
ServerType                      standalone
DeferWelcome                    off
UseReverseDNS                   off

MultilineRFC2228                on
DefaultServer                   on
DefaultAddress                  1.2.3.4
ShowSymlinks                    on

TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200

DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
ListOptions                     "-l"

DenyFilter                      \*.*/

# Port 21 is the standard FTP port.
Port                            21


MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            proftpd
Group                           nogroup

# Normally, we want files to be overwriteable.
AllowOverwrite                  on

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
PersistentPasswd                off


LogFormat write "%t %h %l %u  \"%r\" %s %b %T"
TransferLog /var/log/proftpd/xferlog
SystemLog   /var/log/proftpd/proftpd.log
ExtendedLog /var/log/proftpd/xtendlog Read,Write,Auth write
#SyslogLevel                     warn
SyslogLevel                     debug

# User Settings
AuthUserFile                    /etc/proftpd/users.passwd

RootLogin                       off
CreateHome                      on dirmode 755
DefaultRoot                     ~
DeleteAbortedStores             on
IdentLookups                    off
MaxClientsPerHost               5
MaxLoginAttempts                5
RequireValidShell               off
RootRevoke                      off
TimesGMT        off


<IfModule mod_tls.c>
TLSEngine off
</IfModule>

<IfModule mod_quota.c>
QuotaEngine on
</IfModule>

<IfModule mod_ratio.c>
Ratios on
</IfModule>


# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default. 
<IfModule mod_delay.c>
#DelayEngine on
DelayEngine off
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine        on
ControlsMaxClients    2
ControlsLog           /var/log/proftpd/controls.log
ControlsInterval      5
ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine on
</IfModule>
<IfModule mod_ldap.c>

## Define the LDAP server to contact 
LDAPServer    5.6.7.8:389


## Limit users to their web directory. Use an "ad hoc" search filter
mplate"  ]
LDAPDoAuth     on "dc=aaa,dc=de" "(&(uid=%v)(objectclass=posixAccount))"

## LDAP Bind Directives
## Syntax -> LDAPDNInfo [ LDAPDNInfo "ldap-dn" "dn-password"  ]
LDAPDNInfo "uid=bind,dc=aaa,dc=de" passwd

## Require that an incoming user can successfully bind to the LDAPServer.
LDAPAuthBinds     on

## Look up UIDs and GIDs in the directory.

LDAPDoUIDLookups   on "dc=aaa,dc=de"

LDAPSearchScope subtree

</IfModule>