ProFTPD のバックアップ(No.2)

バックアップ一覧
差分を表示
現在との差分を表示
ソースを表示
ProFTPD へ行く。
- 1 (2007-04-04 (水) 15:17:30)
- 2 (2008-07-11 (金) 01:47:25)

./configure  --with-modules=mod_tls --with-includes=/usr/include/openssl
make
make install

# default: on
# description: The ProFTPD FTP server
service ftp
{
       flags           = REUSE
       socket_type     = stream
       wait            = no
       user            = root
       server          = /usr/local/sbin/in.proftpd
       log_on_success  += HOST PID
       log_on_failure  += HOST
       disable         = no
}

log_on_success  += HOST PID USERID EXIT DURATION
log_on_failure  += HOST USERID

/etc/init.d/xinetd restart

/usr/local/sbin/proftpd -l

/usr/local/sbin/proftpd -n

↑

proftpd.conf

Servertype
DefaultServer? on VirtualHost?
Umask 022
ServerIdent? on ""
DefaultRoot?
```
DefaultRoot ~ ,!nobody
```
ShowDotFiles? off
```
ListOptions "-a"
```
RootLogin? off
UseReverseDNS off
IdentLookups? off
TimesGMT off
AllowRetrieveRestart? on
DeleteAbortedStores? on
MaxClientsPerHost? 1

MaxStoreFileSize? 10 Mb

#hogegrp
MaxStoreFileSize 500 Mb group hogegrp
#hogeuser
MaxStoreFileSize 500 Mb user hogeuser
#etc
MaxStoreFileSize 10 Mb

AuthPAMConfig ftp
PathDenyFilter? "(\.mpeg)|(\.mpg)|(\.exe)|(\.MPEG)|(\.MPG)|(\.EXE)$"

Directory

<Directory /*>
AllowOverwrite on
</Directory>

<Anonymous ~ftp>

<Limit SITE_CHMOD>
  DenyAll
</Limit>

AllowAll?

MasqueradeAddress?
PassivePorts? 4000 4029

mod_delay.c

mkdir /var/proftpd
chown -R nobody:nobody /var/proftpd

<IfModule mod_delay.c>
 DelayEngine                   on
</IfModule>
DelayTable                      /var/proftpd/proftpd.delay

mod_tls.c

<IfModule mod_tls.c>
 TLSEngine                     on
 TLSLog                        /var/log/proftpd/tls.log
 TLSProtocol                   SSLv23

 TLSRequired                   off

 TLSRSACertificateFile      /usr/local/mycerts/server.crt

 TLSRSACertificateKeyFile  /usr/local/mycerts/server.key

 TLSVerifyClient               off
</IfModule>

SSL

LogFormat allinfo "%t :  %u (%a [%h]) : [%s], %T, %m (%f)"
LogFormat write "%t : %u : %F (%a) : [%s]"
LogFormat read "%t : %u : %F (%a) : [%s]"
LogFormat auth "%t : %u (%a [%h]) : [%s]"
ExtendedLog /var/log/proftpd/all.log ALL allinfo
ExtendedLog /var/log/proftpd/write.log WRITE write
ExtendedLog /var/log/proftpd/read.log  READ read
ExtendedLog /var/log/proftpd/auth.log AUTH auth

http://www.atmarkit.co.jp/fnetwork/rensai/netpro10/ftp-responsecode.html

/usr/local/sbin/proftpd -t /usr/local/etc/proftpd.conf
(/usr/local/sbin/proftpd -t)

/etc/init.d/xinetd restart

↑

SSL/TLS

http://www.aconus.com/~oyaji/ftp/proftpd_ssl.htm
http://homepage1.nifty.com/yito/anhttpd/faq/ftp.html

↑

TIPS

AllowUser?

<Limit Login>
 Order allow,deny
 AllowGroup hogeg
 AllowUser hogeu1,hogeu2
 Deny All
</Limit>

↑

http://www.infoscience.co.jp/technical/proftpd/index.html
http://yamamaya.com/labo/labo2-3.html
http://www.stackasterisk.jp/tech/systemConstruction/proftpd01_01.jsp
http://www.miloweb.net/pastbbs/0005/1382.html
http://www.aconus.com/~oyaji/ftp/proftpd_rpm.htm
http://sphere.zive.net/server/ftp.htm
http://landisk.kororo.jp/diary/34_proftpssl.php

↑